Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PAM IDE-CD SG_IO绕过安全限制访问设备漏洞
Vulnerability Description
PAM(也称Linux-PAM)是一种用于Linux平台中的认证机制,它通过提供一些动态链接库和一套统一的API,使系统管理员可以自由选择应用程序使用的验证机制。 Linux内核处理特定的SG_IO命令的方式存在漏洞,控制台用户可能破坏可读写的CD介质。 需要调整pam_console的设置来禁止对某些设备文件的访问。
CVSS Information
N/A
Vulnerability Type
N/A