PT-2004-3731 · Linux+1 · Linux+1

Publicado 1970-01-01 · Atualizado 2017-10-11 · CVE-2004-1068

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux versions 2.4.27 and earlier, and 2.6.x up to 2.6.9 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u (affected versions not specified) Debian GNU/Linux kernel-patch-benh (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.19-sparc (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.18-sparc (affected versions not specified) Debian GNU/Linux kernel-image-2.4.19-sun4u (affected versions not specified)

Description A "missing serialization" error in the unix dgram recvmsg function allows local users to gain privileges via a race condition. Multiple vulnerabilities in Debian GNU/Linux kernel packages may lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For Linux versions 2.4.27 and earlier, and 2.6.x up to 2.6.9: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-sun4u: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-patch-benh: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-headers-2.4.19-sparc: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-headers-2.4.18-sparc: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.19-sun4u: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-1068

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:549

Produtos afetados

Debian

Linux

Referências · 62

• http://secunia.com/advisories/19607 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2004-1068 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• http://securityfocus.com/bid/11715 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18230 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2004-537.html · Aviso do Fabricante
• http://secunia.com/advisories/20163 · Nota