PT-2004-2116 · Linux · Linux

Jeremy Fitzhardinge · Published 2004-12-08 · Updated 2016-10-18 · CVE-2004-1151

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux versions 2.6.x

Description: The issue is related to multiple buffer overflows in the sys32 ni syscall and sys32 vm86 warning functions. This could allow local attackers to modify kernel memory and gain privileges.

Recommendations: For Linux version 2.6.x, consider applying a patch or fix that addresses the buffer overflows in the sys32 ni syscall and sys32 vm86 warning functions to prevent local attackers from modifying kernel memory and gaining privileges.

Fix

Related Identifiers

CVE-2004-1151

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2004-1151 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2005:022 · Vendor Advisory
• http://novell.com/linux/security/advisories/2004_44_kernel.html · Vendor Advisory
• http://ussg.iu.edu/hypermail/linux/kernel/0411.3/1467.html · Note
• http://linux.bkbits.net:8080/linux-2.6/gnupatch%4041ae6af1cR3mJYlW6D8EHxCKSxuJiQ · Note
• http://marc.info/?l=bugtraq&m=110306397320336&w=2 · Note
• http://linux.bkbits.net:8080/linux-2.6/cset%401.2079 · Note