PT-2004-3724 · Linux+1 · Linux+1

Published 1970-01-01 · Updated 2017-10-11 · CVE-2004-0447

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux versions prior to 2.4.26 for IA64 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp version Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs version Debian GNU/Linux kernel-image-2.4.18-sun4u version Debian GNU/Linux kernel-patch-benh version Debian GNU/Linux kernel-image-2.4.18-sun4u-smp version Debian GNU/Linux kernel-headers-2.4.19-sparc version Debian GNU/Linux kernel-headers-2.4.18-sparc version Debian GNU/Linux kernel-image-2.4.19-sun4u version

Description The issue allows local users to cause a denial of service, with unknown impact. Multiple vulnerabilities in Debian GNU/Linux kernel packages may lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For Linux versions prior to 2.4.26 for IA64, update to version 2.4.26 or later. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp, consider disabling the vulnerable kernel image until a patch is available. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs, restrict access to the vulnerable kernel image to minimize the risk of exploitation. For Debian GNU/Linux kernel-image-2.4.18-sun4u, avoid using the vulnerable kernel image in production environments until the issue is resolved. For Debian GNU/Linux kernel-patch-benh, consider applying a patch or updating to a newer version of the kernel patch. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp, restrict access to the vulnerable kernel image to minimize the risk of exploitation. For Debian GNU/Linux kernel-headers-2.4.19-sparc, consider updating to a newer version of the kernel headers. For Debian GNU/Linux kernel-headers-2.4.18-sparc, restrict access to the vulnerable kernel headers to minimize the risk of exploitation. For Debian GNU/Linux kernel-image-2.4.19-sun4u, consider disabling the vulnerable kernel image until a patch is available.

Fix

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-0447

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:413

Affected Products

Debian

Linux

References · 57

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory
• http://securityfocus.com/bid/10783 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0565 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0984 · Security Note