PT-2004-3737 · Linux+1 · Linux Kernel+1

Publicado 1970-01-01 · Atualizado 2017-10-11 · CVE-2004-1234

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.26 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp versions Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs versions Debian GNU/Linux kernel-image-2.4.18-sun4u versions Debian GNU/Linux kernel-patch-benh versions Debian GNU/Linux kernel-image-2.4.18-sun4u-smp versions Debian GNU/Linux kernel-headers-2.4.19-sparc versions Debian GNU/Linux kernel-headers-2.4.18-sparc versions Debian GNU/Linux kernel-image-2.4.19-sun4u versions

Description The issue concerns multiple vulnerabilities in the Linux kernel and Debian GNU/Linux kernel packages. These vulnerabilities can be exploited remotely, potentially leading to a breach of confidentiality, integrity, and availability of protected information. A specific vulnerability in the load elf binary function in Linux before version 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary with a NULL interpreter.

Recommendations For Linux kernel versions prior to 2.4.26, update to version 2.4.26 or later to resolve the issue. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp, consider disabling the vulnerable components until a patch is available. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs, restrict access to the vulnerable module to minimize the risk of exploitation. For Debian GNU/Linux kernel-image-2.4.18-sun4u, avoid using the vulnerable parameters in the affected API endpoints until the issue is resolved. For Debian GNU/Linux kernel-patch-benh, kernel-image-2.4.18-sun4u-smp, kernel-headers-2.4.19-sparc, kernel-headers-2.4.18-sparc, and kernel-image-2.4.19-sun4u, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-1234

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:689

Produtos afetados

Debian

Linux Kernel

Referências · 58

• 🔥 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142965 · Exploit
• http://linux.bkbits.net:8080/linux-2.4/cset%404076466d_SqUm4azg4_v3FIG2-X6XQ · Nota
• http://redhat.com/support/errata/RHSA-2005-016.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03576 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03384 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2005-017.html · Aviso do Fabricante
• https://bugzilla.fedora.us/show_bug.cgi?id=2336 · Correção, Aviso do Fabricante
• http://debian.org/security/2006/dsa-1069 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Nota de Segurança
• http://secunia.com/advisories/20163 · Nota