CVE-2004-1190

Advisory lineage Upstream: 0 Downstream: 1
Downstream
RHSA-2006:0101
Modified
Published: 15 Dec 2004, 05:00
Last modified:08 Aug 2024, 00:46

Vulnerability Summary

Overall Risk (default)
minimal
8/100
CVSS Score
2.1 LOW
v2.0 (nvd)
EPSS Score
0.08% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 Dec 2004, 05:00
Published
Vulnerability first disclosed
08 Aug 2024, 00:46
Last Modified
Vulnerability information updated

Description

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

CVSS Metrics

  • v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 0.08%• Percentile: 25%

Affected Systems

  • suse•suse_linux

    8.1 | 8.2 | 9.0

References (6)