Published: 10/01/2005 Updated: 11/10/2017

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.4.0
linux linux kernel 2.4.1
linux linux kernel 2.4.10
linux linux kernel 2.4.17
linux linux kernel 2.4.18
linux linux kernel 2.4.19
linux linux kernel 2.4.2
linux linux kernel 2.4.23
linux linux kernel 2.4.23_ow2
linux linux kernel 2.4.27
linux linux kernel 2.4.7
linux linux kernel 2.4.8
linux linux kernel 2.6.0
linux linux kernel 2.6.1
linux linux kernel 2.6.2
linux linux kernel 2.6.7
linux linux kernel 2.6.8
redhat enterprise linux 2.1
redhat fedora core core_2.0
linux linux kernel 2.4.15
linux linux kernel 2.4.16
redhat fedora core core_3.0
suse suse linux 9.0
turbolinux turbolinux server 10.0
linux linux kernel 2.4.13
linux linux kernel 2.4.14
linux linux kernel 2.4.21
linux linux kernel 2.4.25
linux linux kernel 2.4.26
linux linux kernel 2.4.3
linux linux kernel 2.4.4
linux linux kernel 2.6.5
linux linux kernel 2.6.6
linux linux kernel 2.6.9
linux linux kernel 2.6_test9_cvs
redhat enterprise linux 3.0
suse suse linux 1.0
suse suse linux 8.1
trustix secure linux 1.5
trustix secure linux 2.0
linux linux kernel 2.4.22
linux linux kernel 2.4.5
linux linux kernel 2.4.6
redhat enterprise linux desktop 3.0
suse suse linux 8.2
suse suse linux 8
trustix secure linux 2.1
trustix secure linux 2.2
linux linux kernel 2.4.11
linux linux kernel 2.4.12
linux linux kernel 2.4.20
linux linux kernel 2.4.24
linux linux kernel 2.4.24_ow1
linux linux kernel 2.4.9
linux linux kernel 2.6.3
linux linux kernel 2.6.4
redhat linux advanced workstation 2.1
suse suse linux 9.1
suse suse linux 9.2

Synopsis kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues in Red HatEnterprise Linux 3 are now available Description The Linux kernel handles the basic functions of the operating systemThis update includes fix ...

Synopsis Updated kernel packages fix security vulnerability Type/Severity Security Advisory: Important Topic Updated kernel packages are now available as part of ongoingsupport and maintenance of Red Hat Enterprise Linux version21 This is the sixth regular update Description The Linux ke ...

Synopsis Updated Itanium kernel packages resolve security issues Type/Severity Security Advisory: Important Topic Updated Itanium kernel packages are now available as part of ongoingsupport and maintenance of Red Hat Enterprise Linux version 21 This isthe sixth regular update Description ...

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2004-0427 A local denial of service vulnerability in do_fork() has been found CVE-2005-0489 A ...

NVD-CWE-Other http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt https://bugzilla.fedora.us/show_bug.cgi?id=2336 http://www.redhat.com/support/errata/RHSA-2004-549.html http://www.debian.org/security/2006/dsa-1070 http://www.debian.org/security/2006/dsa-1067 http://www.debian.org/security/2006/dsa-1069 http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://www.redhat.com/support/errata/RHSA-2004-504.html http://www.redhat.com/support/errata/RHSA-2004-505.html http://www.securityfocus.com/bid/11646 http://secunia.com/advisories/20202 http://www.debian.org/security/2006/dsa-1082 http://secunia.com/advisories/20338 ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U http://secunia.com/advisories/19607 http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 https://exchange.xforce.ibmcloud.com/vulnerabilities/18025 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9450 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2004:549 https://www.debian.org/security/./dsa-1067

CVE-2004-1070

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect