NVD

Id
70545  
Name
CVE-2004-0077  
Description
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2004-03-03  
Modified Date
2016-10-17  
Seq
2004-0077  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363531 70545 CVE-2004-0077 20040218 Second critical mremap() bug found in all Linux kernels  View
363532 70545 CVE-2004-0077 CLA-2004:820  View
363533 70545 CVE-2004-0077 FEDORA-2004-079  View
363534 70545 CVE-2004-0077 MDKSA-2004:015  View
363535 70545 CVE-2004-0077 http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt  View
363536 70545 CVE-2004-0077 20040218 Second critical mremap() bug found in all Linux kernels  View
363537 70545 CVE-2004-0077 2004-0007  View
363538 70545 CVE-2004-0077 2004-0008  View
363539 70545 CVE-2004-0077 oval:org.mitre.oval:def:825  View
363540 70545 CVE-2004-0077 oval:org.mitre.oval:def:837  View
363541 70545 CVE-2004-0077 GLSA-200403-02  View
363542 70545 CVE-2004-0077 O-082  View
363543 70545 CVE-2004-0077 DSA-438  View
363544 70545 CVE-2004-0077 DSA-439  View
363545 70545 CVE-2004-0077 DSA-440  View
363546 70545 CVE-2004-0077 DSA-441  View
363547 70545 CVE-2004-0077 DSA-442  View
363548 70545 CVE-2004-0077 DSA-444  View
363549 70545 CVE-2004-0077 DSA-450  View
363550 70545 CVE-2004-0077 DSA-453  View
363551 70545 CVE-2004-0077 DSA-454  View
363552 70545 CVE-2004-0077 DSA-456  View
363553 70545 CVE-2004-0077 DSA-466  View
363554 70545 CVE-2004-0077 DSA-470  View
363555 70545 CVE-2004-0077 DSA-475  View
363556 70545 CVE-2004-0077 DSA-514  View
363557 70545 CVE-2004-0077 VU#981222  View
363558 70545 CVE-2004-0077 SuSE-SA:2004:005  View
363559 70545 CVE-2004-0077 RHSA-2004:065  View
363560 70545 CVE-2004-0077 RHSA-2004:066  View
363561 70545 CVE-2004-0077 RHSA-2004:069  View
363562 70545 CVE-2004-0077 RHSA-2004:106  View
363563 70545 CVE-2004-0077 9686  View
363564 70545 CVE-2004-0077 SSA:2004-049  View
363565 70545 CVE-2004-0077 linux-mremap-gain-privileges(15244)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62708 JVNDB-2004-000049 Linux Kernel の do_mremap() 関数における権限昇格の脆弱性 Linux Kernel に実装されている do_mremap() 関数は、do_munmap() 関数の戻り値に対するチェックが不適切であるため、 do_munmap() 関数が VM ディスクプリタの不足により失敗した場合、再マッピングにより既存の VMA に対し他のプロセスの VMA をオーバーラップしようと試みてしまい、カーネルのメモリ管理サブシステムが予測不可能な動作をしてしまう脆弱性が存在します。 CVE-2004-0077 8504 CVE-2004-0077 70545 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000049.html 2004-02-18 2007-04-01 View