PT-2004-3733 · Linux · Linux Kernel

Paul Starzetz · Publicado 1970-01-01 · Atualizado 2017-10-11 · CVE-2004-1071

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version Debian GNU/Linux kernel-image-2.4.18-sun4u version Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version Debian GNU/Linux kernel-image-2.4.19-sparc version Debian GNU/Linux kernel-image-2.4.19-sun4u version Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version Linux kernel versions 2.4.x up to 2.4.27 Linux kernel versions 2.6.x up to 2.6.8

Description The issue involves multiple vulnerabilities in the Linux kernel, which can be exploited to compromise the confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The binfmt elf loader in the Linux kernel does not properly handle a failed call to the mmap function, causing an incorrect mapped image and potentially allowing local users to execute arbitrary code.

Recommendations For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs, consider disabling the vulnerable kernel image until a patch is available. For Debian GNU/Linux kernel-image-2.4.18-sun4u, consider disabling the vulnerable kernel image until a patch is available. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp, consider disabling the vulnerable kernel image until a patch is available. For Debian GNU/Linux kernel-image-2.4.19-sparc, consider disabling the vulnerable kernel image until a patch is available. For Debian GNU/Linux kernel-image-2.4.19-sun4u, consider disabling the vulnerable kernel image until a patch is available. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp, consider disabling the vulnerable kernel image until a patch is available. For Linux kernel versions 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8, consider updating to a newer version to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-1071

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:549

Produtos afetados

Linux Kernel

Referências · 60

• http://secunia.com/advisories/19607 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9917 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1071 · Nota de Segurança
• http://debian.org/security/dsa-1069 · Nota
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2004-537.html · Aviso do Fabricante
• http://isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt · Nota