Vulnerability in Suse Linux

CVE-2004-1190

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.

Affected products

Suse Suse_linux — versions 8.1, 8.2, 9.0
N/a — versions n/a

References

cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
cve@mitre.org (vendor-advisory, Patch, x_refsource_SUSE, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)