NVD

Id
71462  
Name
CVE-2004-1070  
Description
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1070  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369589 71462 CVE-2004-1070 20060402-01-U  View
369590 71462 CVE-2004-1070 oval:org.mitre.oval:def:9450  View
369591 71462 CVE-2004-1070 DSA-1067  View
369592 71462 CVE-2004-1070 DSA-1069  View
369593 71462 CVE-2004-1070 DSA-1070  View
369594 71462 CVE-2004-1070 DSA-1082  View
369595 71462 CVE-2004-1070 http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt  View
369596 71462 CVE-2004-1070 MDKSA-2005:022  View
369597 71462 CVE-2004-1070 RHSA-2004:504  View
369598 71462 CVE-2004-1070 RHSA-2004:505  View
369599 71462 CVE-2004-1070 RHSA-2004:549  View
369600 71462 CVE-2004-1070 11646  View
369601 71462 CVE-2004-1070 linux-elf-setuid-gain-privileges(18025)  View
369602 71462 CVE-2004-1070 FLSA:2336  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63139 JVNDB-2004-000481 Linux Kernel の load_elf_binary() 関数における任意のコードを実行される脆弱性 ------------ CVE-2004-1070 9497 CVE-2004-1070 71462 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000481.html 2004-11-10 2007-04-01 View