CVE
- Id
- 8537
- CVE No.
- CVE-2004-0109
- Status
- Candidate
- Description
- Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
- Phase
- Assigned (20040202)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
| Id | CVE Id | CVE No. | Reference | Actions |
|---|---|---|---|---|
| 52630 | 8537 | CVE-2004-0109 | MISC:http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities | View |
| 52631 | 8537 | CVE-2004-0109 | CONECTIVA:CLA-2004:846 | View |
| 52632 | 8537 | CVE-2004-0109 | URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 | View |
| 52633 | 8537 | CVE-2004-0109 | DEBIAN:DSA-479 | View |
| 52634 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-479 | View |
| 52635 | 8537 | CVE-2004-0109 | DEBIAN:DSA-480 | View |
| 52636 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-480 | View |
| 52637 | 8537 | CVE-2004-0109 | DEBIAN:DSA-481 | View |
| 52638 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-481 | View |
| 52639 | 8537 | CVE-2004-0109 | DEBIAN:DSA-482 | View |
| 52640 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-482 | View |
| 52641 | 8537 | CVE-2004-0109 | DEBIAN:DSA-489 | View |
| 52642 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-489 | View |
| 52643 | 8537 | CVE-2004-0109 | DEBIAN:DSA-491 | View |
| 52644 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-491 | View |
| 52645 | 8537 | CVE-2004-0109 | DEBIAN:DSA-495 | View |
| 52646 | 8537 | CVE-2004-0109 | URL:http://www.debian.org/security/2004/dsa-495 | View |
| 52647 | 8537 | CVE-2004-0109 | ENGARDE:ESA-20040428-004 | View |
| 52648 | 8537 | CVE-2004-0109 | URL:http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html | View |
| 52649 | 8537 | CVE-2004-0109 | GENTOO:GLSA-200407-02 | View |
| 52650 | 8537 | CVE-2004-0109 | URL:http://security.gentoo.org/glsa/glsa-200407-02.xml | View |
| 52651 | 8537 | CVE-2004-0109 | MANDRAKE:MDKSA-2004:029 | View |
| 52652 | 8537 | CVE-2004-0109 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:029 | View |
| 52653 | 8537 | CVE-2004-0109 | REDHAT:RHSA-2004:105 | View |
| 52654 | 8537 | CVE-2004-0109 | URL:http://www.redhat.com/support/errata/RHSA-2004-105.html | View |
| 52655 | 8537 | CVE-2004-0109 | REDHAT:RHSA-2004:106 | View |
| 52656 | 8537 | CVE-2004-0109 | URL:http://www.redhat.com/support/errata/RHSA-2004-106.html | View |
| 52657 | 8537 | CVE-2004-0109 | REDHAT:RHSA-2004:166 | View |
| 52658 | 8537 | CVE-2004-0109 | URL:http://rhn.redhat.com/errata/RHSA-2004-166.html | View |
| 52659 | 8537 | CVE-2004-0109 | REDHAT:RHSA-2004:183 | View |
| 52660 | 8537 | CVE-2004-0109 | URL:http://www.redhat.com/support/errata/RHSA-2004-183.html | View |
| 52661 | 8537 | CVE-2004-0109 | SGI:20040405-01-U | View |
| 52662 | 8537 | CVE-2004-0109 | URL:ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc | View |
| 52663 | 8537 | CVE-2004-0109 | SGI:20040504-01-U | View |
| 52664 | 8537 | CVE-2004-0109 | URL:ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc | View |
| 52665 | 8537 | CVE-2004-0109 | SUSE:SuSE-SA:2004:009 | View |
| 52666 | 8537 | CVE-2004-0109 | URL:http://www.novell.com/linux/security/advisories/2004_09_kernel.html | View |
| 52667 | 8537 | CVE-2004-0109 | TRUSTIX:2004-0020 | View |
| 52668 | 8537 | CVE-2004-0109 | URL:http://marc.info/?l=bugtraq&m=108213675028441&w=2 | View |
| 52669 | 8537 | CVE-2004-0109 | TURBO:TLSA-2004-14 | View |
| 52670 | 8537 | CVE-2004-0109 | URL:http://www.turbolinux.com/security/2004/TLSA-2004-14.txt | View |
| 52671 | 8537 | CVE-2004-0109 | CIAC:O-121 | View |
| 52672 | 8537 | CVE-2004-0109 | URL:http://www.ciac.org/ciac/bulletins/o-121.shtml | View |
| 52673 | 8537 | CVE-2004-0109 | CIAC:O-127 | View |
| 52674 | 8537 | CVE-2004-0109 | URL:http://www.ciac.org/ciac/bulletins/o-127.shtml | View |
| 52675 | 8537 | CVE-2004-0109 | BID:10141 | View |
| 52676 | 8537 | CVE-2004-0109 | URL:http://www.securityfocus.com/bid/10141 | View |
| 52677 | 8537 | CVE-2004-0109 | OVAL:oval:org.mitre.oval:def:940 | View |
| 52678 | 8537 | CVE-2004-0109 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:940 | View |
| 52679 | 8537 | CVE-2004-0109 | OVAL:oval:org.mitre.oval:def:10733 | View |
| 52680 | 8537 | CVE-2004-0109 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10733 | View |
| 52681 | 8537 | CVE-2004-0109 | SECUNIA:11361 | View |
| 52682 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11361 | View |
| 52683 | 8537 | CVE-2004-0109 | SECUNIA:11362 | View |
| 52684 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11362 | View |
| 52685 | 8537 | CVE-2004-0109 | SECUNIA:11373 | View |
| 52686 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11373 | View |
| 52687 | 8537 | CVE-2004-0109 | SECUNIA:11429 | View |
| 52688 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11429 | View |
| 52689 | 8537 | CVE-2004-0109 | SECUNIA:11464 | View |
| 52690 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11464 | View |
| 52691 | 8537 | CVE-2004-0109 | SECUNIA:11469 | View |
| 52692 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11469 | View |
| 52693 | 8537 | CVE-2004-0109 | SECUNIA:11470 | View |
| 52694 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11470 | View |
| 52695 | 8537 | CVE-2004-0109 | SECUNIA:11486 | View |
| 52696 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11486 | View |
| 52697 | 8537 | CVE-2004-0109 | SECUNIA:11494 | View |
| 52698 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11494 | View |
| 52699 | 8537 | CVE-2004-0109 | SECUNIA:11518 | View |
| 52700 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11518 | View |
| 52701 | 8537 | CVE-2004-0109 | SECUNIA:11626 | View |
| 52702 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11626 | View |
| 52703 | 8537 | CVE-2004-0109 | SECUNIA:11861 | View |
| 52704 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11861 | View |
| 52705 | 8537 | CVE-2004-0109 | SECUNIA:11891 | View |
| 52706 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11891 | View |
| 52707 | 8537 | CVE-2004-0109 | SECUNIA:11986 | View |
| 52708 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/11986 | View |
| 52709 | 8537 | CVE-2004-0109 | SECUNIA:12003 | View |
| 52710 | 8537 | CVE-2004-0109 | URL:http://secunia.com/advisories/12003 | View |
| 52711 | 8537 | CVE-2004-0109 | XF:linux-iso9660-bo(15866) | View |
Related JVN
| Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 62717 | JVNDB-2004-000058 | libxml2 の nanohttp.c/nanoftp.c におけるバッファオーバーフローの脆弱性 | libxml2 には、nanohttp.c/nanoftp.c において URL の長さに対するチェックが不適切であるため、リソースを取得する際に異常に長い URL を解釈した場合、バッファオーバーフローが発生する脆弱性が存在します。 | CVE-2004-0110 | 8537 | 7.5 | http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000058.html | View |