PT-2004-1098 · Gentoo Linux+1 · Aa-Sources+1

Published 2004-06-03 · Updated 2017-07-11 · CVE-2004-0228

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6 aa-sources versions prior to 2.4.23-r2

Description The issue is related to an integer signedness error in the cpufreq proc handler, which allows local users to gain privileges. Additionally, there are multiple vulnerabilities in the aa-sources package of Gentoo Linux, which can lead to violations of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.

Recommendations For Linux kernel versions prior to 2.6, update to version 2.6 or later to resolve the issue. For aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later to fix the vulnerabilities.

Exploit

Fix

Related Identifiers

BDU:2015-09455

CVE-2004-0228

Affected Products

Linux Kernel

Aa-Sources

References · 14

• 🔥 https://exploit-db.com/exploits/24043 · Exploit
• http://security.gentoo.org/glsa/glsa-200407-02.xml · Vendor Advisory
• http://fedoranews.org/updates/FEDORA-2004-111.shtml · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:050 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09455 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0228 · Security Note
• http://novell.com/linux/security/advisories/2004_10_kernel.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15951 · Note
• http://secunia.com/advisories/11429 · Note
• http://secunia.com/advisories/11491 · Note
• http://secunia.com/advisories/11464 · Note
• http://secunia.com/advisories/11683 · Note
• http://secunia.com/advisories/11486 · Note