PT-2004-3731 · Linux+1 · Linux+1

Published 1970-01-01 · Updated 2017-10-11 · CVE-2004-1068

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux versions 2.4.27 and earlier, and 2.6.x up to 2.6.9 Debian GNU/Linux kernel-image-2.4.19-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u (affected versions not specified) Debian GNU/Linux kernel-patch-benh (affected versions not specified) Debian GNU/Linux kernel-image-2.4.18-sun4u-smp (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.19-sparc (affected versions not specified) Debian GNU/Linux kernel-headers-2.4.18-sparc (affected versions not specified) Debian GNU/Linux kernel-image-2.4.19-sun4u (affected versions not specified)

Description A "missing serialization" error in the unix dgram recvmsg function allows local users to gain privileges via a race condition. Multiple vulnerabilities in Debian GNU/Linux kernel packages may lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For Linux versions 2.4.27 and earlier, and 2.6.x up to 2.6.9: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.19-sun4u-smp: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-powerpc-xfs: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-sun4u: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-patch-benh: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.18-sun4u-smp: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-headers-2.4.19-sparc: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-headers-2.4.18-sparc: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux kernel-image-2.4.19-sun4u: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03380

BDU:2015-03381

BDU:2015-03382

BDU:2015-03383

BDU:2015-03384

BDU:2015-03385

BDU:2015-03576

BDU:2015-03577

CVE-2004-1068

DSA-1067-1

DSA-1069-1

DSA-1070-1

DSA-1082-1

RHSA-2004:549

Affected Products

Debian

Linux

References · 62

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0138 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-1068 · Security Note
• https://bdu.fstec.ru/vul/2015-03576 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0997 · Security Note
• https://bdu.fstec.ru/vul/2015-03384 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1072 · Security Note
• http://securityfocus.com/bid/11715 · Vendor Advisory
• http://debian.org/security/2006/dsa-1069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1070 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0001 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1234 · Security Note
• http://redhat.com/support/errata/RHSA-2004-537.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0565 · Security Note