NVD

Id
67004  
Name
CVE-2005-1263  
Description
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2005-05-11  
Modified Date
2011-03-07  
Seq
2005-1263  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
347899 67004 CVE-2005-1263 20060402-01-U  View
347900 67004 CVE-2005-1263 oval:org.mitre.oval:def:10909  View
347901 67004 CVE-2005-1263 oval:org.mitre.oval:def:1122  View
347902 67004 CVE-2005-1263 http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt  View
347903 67004 CVE-2005-1263 RHSA-2005:472  View
347904 67004 CVE-2005-1263 RHSA-2005:529  View
347905 67004 CVE-2005-1263 RHSA-2005:551  View
347906 67004 CVE-2005-1263 20050511 Linux kernel ELF core dump privilege elevation  View
347907 67004 CVE-2005-1263 FLSA:157459-3  View
347908 67004 CVE-2005-1263 FLSA:157459-1  View
347909 67004 CVE-2005-1263 FLSA:157459-2  View
347910 67004 CVE-2005-1263 13589  View
347911 67004 CVE-2005-1263 ADV-2005-0524  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62119 JVNDB-2005-000321 Linux Kernel の elf_core_dump() 関数におけるバッファオーバーフローの脆弱性 Linux Kernel の elf_core_dump() 関数において、 copy_from_user() 関数でコピーを行う長さを指定する変数に、負の値を利用した ELF フォーマットのバイナリをロードすることにより、カーネル権限で任意のコードを実行する脆弱性が存在します。 CVE-2005-1263 12467 CVE-2005-1263 67004 7.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000321.html 2005-05-11 2007-04-01 View