PT-2004-1019 · Debian · Trr19

Published 2004-01-29 · Updated 2017-07-11 · CVE-2004-0047

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions trr19 versions 1.0

Description The issue concerns multiple vulnerabilities in the trr19 package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities allow local users to potentially gain privileges due to improper privilege dropping before executing system commands.

Recommendations For trr19 version 1.0, consider restricting access to system commands until a patch is available to prevent local users from gaining privileges. As a temporary workaround, ensure that all system commands are executed with proper privilege handling to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-02956

CVE-2004-0047

DSA-430

Affected Products

Trr19

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0047 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0047 · Security Note
• http://securityfocus.com/bid/9520 · Vendor Advisory
• http://debian.org/security/2004/dsa-430 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02956 · Security Note
• http://secunia.com/advisories/10744 · Note
• http://securitytracker.com/id?1008875 · Note
• http://debian.org/security/dsa-430 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14975 · Note
• http://secunia.com/advisories/10745 · Note
• http://osvdb.org/3747 · Note