PT-2004-1098 · Gentoo Linux+1 · Aa-Sources+1

Publicado 2004-06-03 · Atualizado 2017-07-11 · CVE-2004-0228

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6 aa-sources versions prior to 2.4.23-r2

Description The issue is related to an integer signedness error in the cpufreq proc handler, which allows local users to gain privileges. Additionally, there are multiple vulnerabilities in the aa-sources package of Gentoo Linux, which can lead to violations of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.

Recommendations For Linux kernel versions prior to 2.6, update to version 2.6 or later to resolve the issue. For aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later to fix the vulnerabilities.

Exploit

Correção

Identificadores relacionados

BDU:2015-09455

CVE-2004-0228

Produtos afetados

Linux Kernel

Aa-Sources

Referências · 14

• 🔥 https://exploit-db.com/exploits/24043 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15951 · Nota
• http://secunia.com/advisories/11429 · Nota
• http://security.gentoo.org/glsa/glsa-200407-02.xml · Aviso do Fabricante
• http://secunia.com/advisories/11491 · Nota
• http://fedoranews.org/updates/FEDORA-2004-111.shtml · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2004:050 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09455 · Nota de Segurança
• http://secunia.com/advisories/11464 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0228 · Nota de Segurança
• http://novell.com/linux/security/advisories/2004_10_kernel.html · Aviso do Fabricante
• http://secunia.com/advisories/11683 · Nota
• http://secunia.com/advisories/11486 · Nota