PT-2004-3720 · Opensuse+3 · Opensuse+3

Published 1970-01-01 · Updated 2017-10-11 · CVE-2004-0554

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.x through 2.6.x Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version 2.4.18 Debian GNU/Linux kernel-image-2.4.18-sun4u version 2.4.18 Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version 2.4.18 Debian GNU/Linux kernel-image-2.4.19-sparc version 2.4.19 Debian GNU/Linux kernel-image-2.4.19-sun4u version 2.4.19 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version 2.4.19 Gentoo Linux aa-sources versions prior to 2.4.23-r2 openSUSE k i386 (affected versions not specified)

Description The issue affects the Linux kernel and various Linux distributions, including Debian GNU/Linux, Gentoo Linux, and openSUSE. It involves multiple vulnerabilities that can be exploited to compromise the confidentiality, integrity, and availability of protected information. Exploitation can be done remotely or locally, depending on the specific vulnerability and system configuration. The vulnerabilities may cause a denial of service, such as a system crash, and can be triggered by an infinite loop that activates a signal handler with a specific sequence of instructions.

Recommendations For Linux kernel versions 2.4.x through 2.6.x, update to a newer version that includes the necessary security patches. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version 2.4.18, update to a newer version that includes the necessary security patches. For Debian GNU/Linux kernel-image-2.4.18-sun4u version 2.4.18, update to a newer version that includes the necessary security patches. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version 2.4.18, update to a newer version that includes the necessary security patches. For Debian GNU/Linux kernel-image-2.4.19-sparc version 2.4.19, update to a newer version that includes the necessary security patches. For Debian GNU/Linux kernel-image-2.4.19-sun4u version 2.4.19, update to a newer version that includes the necessary security patches. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version 2.4.19, update to a newer version that includes the necessary security patches. For Gentoo Linux aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later. For openSUSE k i386, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

BDU:2015-04799

BDU:2015-09455

CVE-2004-0554

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:255

Affected Products

Debian

Gentoo Linux

Linux Kernel

Opensuse

References · 71

• 🔥 https://exploit-db.com/exploits/306 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• http://security.gentoo.org/glsa/glsa-200407-02.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://novell.com/linux/security/advisories/2004_17_kernel.html · Vendor Advisory
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Security Note
• http://lwn.net/Articles/91155 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Security Note