PT-2004-1100 · Gentoo+1 · Aa-Sources Package+2

Al Viro · Published 2004-06-23 · Updated 2017-10-11 · CVE-2004-0495

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4 and 2.6 aa-sources package versions prior to 2.4.23-r2 in Gentoo Linux

Description The issue concerns multiple unknown vulnerabilities in the Linux kernel and the aa-sources package in Gentoo Linux. These vulnerabilities can be exploited locally to gain privileges, access kernel memory, or disrupt the confidentiality, integrity, and availability of protected information.

Recommendations For Linux kernel versions 2.4 and 2.6, update to a version that includes fixes for these vulnerabilities. For aa-sources package versions prior to 2.4.23-r2 in Gentoo Linux, update to version 2.4.23-r2 or later to resolve the issue.

Fix

Related Identifiers

BDU:2015-09455

CVE-2004-0495

RHSA-2004:255

Affected Products

Gentoo Linux

Linux Kernel

Aa-Sources Package

References · 14

• http://security.gentoo.org/glsa/glsa-200407-02.xml · Vendor Advisory
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845 · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_20_kernel.html · Vendor Advisory
• http://securityfocus.com/bid/10566 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09455 · Security Note
• http://redhat.com/support/errata/RHSA-2004-260.html · Vendor Advisory
• http://lwn.net/Articles/91155 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0495 · Security Note
• http://redhat.com/support/errata/RHSA-2004-255.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10155 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2961 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16449 · Note