PT-2004-3729 · Linux+1 · Linux Kernel+1

Publicado 1970-01-01 · Atualizado 2008-09-05 · CVE-2004-0997

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.17 Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version Debian GNU/Linux kernel-image-2.4.18-sun4u version Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version Debian GNU/Linux kernel-image-2.4.19-sun4u version Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version Debian GNU/Linux kernel-headers-2.4.18-sparc version Debian GNU/Linux kernel-headers-2.4.19-sparc version Debian GNU/Linux kernel-patch-benh version

Description The issue involves multiple vulnerabilities in the Linux kernel and Debian GNU/Linux packages, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The vulnerabilities in the Linux kernel's ptrace MIPS assembly code allow local users to gain privileges via unknown vectors.

Recommendations For Linux kernel version prior to 2.4.17, update to version 2.4.17 or later. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs, consider disabling the package until a patch is available. For Debian GNU/Linux kernel-image-2.4.18-sun4u, restrict access to the kernel until a patch is available. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp, avoid using the vulnerable kernel until a patch is available. For Debian GNU/Linux kernel-image-2.4.19-sun4u, consider disabling the kernel until a patch is available. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp, restrict access to the kernel until a patch is available. For Debian GNU/Linux kernel-headers-2.4.18-sparc, avoid using the vulnerable headers until a patch is available. For Debian GNU/Linux kernel-headers-2.4.19-sparc, consider disabling the headers until a patch is available. For Debian GNU/Linux kernel-patch-benh, restrict access to the patch until a patch is available.

Correção

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-0997

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

Produtos afetados

Debian

Linux Kernel

Referências · 52

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2004-0997?op=file&rev=0&sc=0 · Nota
• http://secunia.com/advisories/20162 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Nota de Segurança
• http://secunia.com/advisories/20338 · Nota