Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2004-1038

Published: Mar 01, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
HIGH
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2004-1038
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.

Affected Software

NameVendorStart VersionEnd Version
Firewire_ieeeIeee1394 (including)1394 (including)
LinuxUbuntudevel*
LinuxUbuntuhardy*
LinuxUbuntuintrepid*
LinuxUbuntujaunty*
LinuxUbuntukarmic*
LinuxUbuntuupstream*
Linux-source-2.6.15Ubuntudapper*
Linux-source-2.6.15Ubuntuupstream*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use