PT-2004-2116 · Linux · Linux

Jeremy Fitzhardinge · Publicado 2004-12-08 · Atualizado 2016-10-18 · CVE-2004-1151

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux versions 2.6.x

Description: The issue is related to multiple buffer overflows in the sys32 ni syscall and sys32 vm86 warning functions. This could allow local attackers to modify kernel memory and gain privileges.

Recommendations: For Linux version 2.6.x, consider applying a patch or fix that addresses the buffer overflows in the sys32 ni syscall and sys32 vm86 warning functions to prevent local attackers from modifying kernel memory and gaining privileges.

Correção

Identificadores relacionados

CVE-2004-1151

Produtos afetados

Linux

Referências · 7

• http://ussg.iu.edu/hypermail/linux/kernel/0411.3/1467.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1151 · Nota de Segurança
• http://linux.bkbits.net:8080/linux-2.6/gnupatch%4041ae6af1cR3mJYlW6D8EHxCKSxuJiQ · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2005:022 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2004_44_kernel.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110306397320336&w=2 · Nota
• http://linux.bkbits.net:8080/linux-2.6/cset%401.2079 · Nota