PT-2004-1046 · Debian+1 · Pppoe+1

Published 2004-11-19 · Updated 2017-07-11 · CVE-2004-0564

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions pppoe versions (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the pppoe package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the integrity of protected information. Specifically, the Roaring Penguin pppoe (rp-ppoe) can allow local users to overwrite arbitrary files if it is installed or configured to run setuid root, contrary to its design. It is noted that the developer has disputed this as a vulnerability since pppoe is not intended to run setuid-root.

Recommendations For configurations where pppoe is run setuid root, consider removing the setuid root configuration to prevent exploitation. As a temporary workaround, consider restricting access to the pppoe package to minimize the risk of arbitrary file overwrites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-04119

CVE-2004-0564

DSA-557-1

Affected Products

Pppoe

Rp-Pppoe

References · 13

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0564 · Security Note
• http://marc.info/?l=bugtraq&m=110247119200510&w=2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0564 · Vendor Advisory
• http://securityfocus.com/bid/11315 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0564 · Security Note
• http://fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html · Vendor Advisory
• http://debian.org/security/2004/dsa-557 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04119 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0564 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110253341209450&w=2 · Note
• http://debian.org/security/dsa-557 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17576 · Note