NVD

Id
71460  
Name
CVE-2004-1068  
Description
A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1068  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369569 71460 CVE-2004-1068 20060402-01-U  View
369570 71460 CVE-2004-1068 20041214 [USN-38-1] Linux kernel vulnerabilities  View
369571 71460 CVE-2004-1068 oval:org.mitre.oval:def:11384  View
369572 71460 CVE-2004-1068 DSA-1067  View
369573 71460 CVE-2004-1068 DSA-1069  View
369574 71460 CVE-2004-1068 DSA-1070  View
369575 71460 CVE-2004-1068 DSA-1082  View
369576 71460 CVE-2004-1068 MDKSA-2005:022  View
369577 71460 CVE-2004-1068 SUSE-SA:2004:044  View
369578 71460 CVE-2004-1068 RHSA-2004:504  View
369579 71460 CVE-2004-1068 RHSA-2004:505  View
369580 71460 CVE-2004-1068 RHSA-2004:537  View
369581 71460 CVE-2004-1068 20041119 Addendum, recent Linux <= 2.4.27 vulnerabilities  View
369582 71460 CVE-2004-1068 11715  View
369583 71460 CVE-2004-1068 linux-afunix-race-condition(18230)  View
369584 71460 CVE-2004-1068 FLSA:2336  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63154 JVNDB-2004-000496 Linux Kernel の unix_dgram_recvmsg() 関数における権限昇格の脆弱性 Linux Kernel に実装されている AF_UNIX ソケットによるプロセス間通信では、af_unix.c 内の unix_dgram_recvmsg() 関数において取り扱うデータグラムのシリアライズに不備が存在し、競合状態が発生する脆弱性が存在します。 CVE-2004-1068 9495 CVE-2004-1068 71460 6.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000496.html 2004-11-19 2007-04-01 View