PT-2004-3721 · Linux+2 · Linux Kernel+2

Shaun Colley · Published 1970-01-01 · Updated 2017-07-11 · CVE-2004-0394

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.4.19-sun4u-smp versions 2.4.19 Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs versions 2.4.18 Debian GNU/Linux kernel-image-2.4.18-sun4u versions 2.4.18 Debian GNU/Linux kernel-patch-benh (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u-smp versions 2.4.18 Debian GNU/Linux kernel-headers-2.4.19-sparc versions 2.4.19 Debian GNU/Linux kernel-headers-2.4.18-sparc versions 2.4.18 Debian GNU/Linux kernel-image-2.4.19-sun4u versions 2.4.19 Gentoo Linux aa-sources versions prior to 2.4.23-r2

Description The issue involves multiple vulnerabilities in the Linux kernel packages of various operating systems, including Debian GNU/Linux and Gentoo Linux. These vulnerabilities can be exploited remotely or locally, leading to a breach of confidentiality, integrity, and availability of protected information. A potential buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic(). The vulnerabilities can be exploited to disrupt the security of the affected systems.

Recommendations For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version 2.4.19, update to a newer version. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-image-2.4.18-sun4u version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-patch-benh, update to a newer version. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-headers-2.4.19-sparc version 2.4.19, update to a newer version. For Debian GNU/Linux kernel-headers-2.4.18-sparc version 2.4.18, update to a newer version. For Debian GNU/Linux kernel-image-2.4.19-sun4u version 2.4.19, update to a newer version. For Gentoo Linux aa-sources versions prior to 2.4.23-r2, update to version 2.4.23-r2 or later.

Fix

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

BDU:2015-09455

CVE-2004-0394

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

Affected Products

Debian

Gentoo Linux

Linux Kernel

References · 60

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• http://security.gentoo.org/glsa/glsa-200407-02.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://linuxsecurity.com/advisories/engarde_advisory-4285.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:037 · Vendor Advisory
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Security Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Security Note