CVE

Id
9498  
CVE No.
CVE-2004-1070  
Status
Candidate  
Description
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.  
Phase
Assigned (20041129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64018 9498 CVE-2004-1070 MISC:http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt  View
64019 9498 CVE-2004-1070 DEBIAN:DSA-1070  View
64020 9498 CVE-2004-1070 URL:http://www.debian.org/security/2006/dsa-1070  View
64021 9498 CVE-2004-1070 DEBIAN:DSA-1067  View
64022 9498 CVE-2004-1070 URL:http://www.debian.org/security/2006/dsa-1067  View
64023 9498 CVE-2004-1070 DEBIAN:DSA-1069  View
64024 9498 CVE-2004-1070 URL:http://www.debian.org/security/2006/dsa-1069  View
64025 9498 CVE-2004-1070 DEBIAN:DSA-1082  View
64026 9498 CVE-2004-1070 URL:http://www.debian.org/security/2006/dsa-1082  View
64027 9498 CVE-2004-1070 FEDORA:FLSA:2336  View
64028 9498 CVE-2004-1070 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2336  View
64029 9498 CVE-2004-1070 MANDRAKE:MDKSA-2005:022  View
64030 9498 CVE-2004-1070 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:022  View
64031 9498 CVE-2004-1070 REDHAT:RHSA-2004:549  View
64032 9498 CVE-2004-1070 URL:http://www.redhat.com/support/errata/RHSA-2004-549.html  View
64033 9498 CVE-2004-1070 REDHAT:RHSA-2004:504  View
64034 9498 CVE-2004-1070 URL:http://www.redhat.com/support/errata/RHSA-2004-504.html  View
64035 9498 CVE-2004-1070 REDHAT:RHSA-2004:505  View
64036 9498 CVE-2004-1070 URL:http://www.redhat.com/support/errata/RHSA-2004-505.html  View
64037 9498 CVE-2004-1070 SGI:20060402-01-U  View
64038 9498 CVE-2004-1070 URL:ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U  View
64039 9498 CVE-2004-1070 BID:11646  View
64040 9498 CVE-2004-1070 URL:http://www.securityfocus.com/bid/11646  View
64041 9498 CVE-2004-1070 OVAL:oval:org.mitre.oval:def:9450  View
64042 9498 CVE-2004-1070 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9450  View
64043 9498 CVE-2004-1070 SECUNIA:20162  View
64044 9498 CVE-2004-1070 URL:http://secunia.com/advisories/20162  View
64045 9498 CVE-2004-1070 SECUNIA:20163  View
64046 9498 CVE-2004-1070 URL:http://secunia.com/advisories/20163  View
64047 9498 CVE-2004-1070 SECUNIA:20202  View
64048 9498 CVE-2004-1070 URL:http://secunia.com/advisories/20202  View
64049 9498 CVE-2004-1070 SECUNIA:20338  View
64050 9498 CVE-2004-1070 URL:http://secunia.com/advisories/20338  View
64051 9498 CVE-2004-1070 SECUNIA:19607  View
64052 9498 CVE-2004-1070 URL:http://secunia.com/advisories/19607  View
64053 9498 CVE-2004-1070 XF:linux-elf-setuid-gain-privileges(18025)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63140 JVNDB-2004-000482 Linux Kernel の mmap() 関数呼び出しにおける任意のコードを実行される脆弱性 ------------ CVE-2004-1071 9498 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000482.html  View