NVD

Id
71464  
Name
CVE-2004-1072  
Description
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369617 71464 CVE-2004-1072 20060402-01-U  View
369618 71464 CVE-2004-1072 oval:org.mitre.oval:def:11195  View
369619 71464 CVE-2004-1072 DSA-1067  View
369620 71464 CVE-2004-1072 DSA-1069  View
369621 71464 CVE-2004-1072 DSA-1070  View
369622 71464 CVE-2004-1072 DSA-1082  View
369623 71464 CVE-2004-1072 http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt  View
369624 71464 CVE-2004-1072 MDKSA-2005:022  View
369625 71464 CVE-2004-1072 RHSA-2004:504  View
369626 71464 CVE-2004-1072 RHSA-2004:505  View
369627 71464 CVE-2004-1072 RHSA-2004:537  View
369628 71464 CVE-2004-1072 RHSA-2005:275  View
369629 71464 CVE-2004-1072 11646  View
369630 71464 CVE-2004-1072 linux-elf-setuid-gain-privileges(18025)  View
369631 71464 CVE-2004-1072 FLSA:2336  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63141 JVNDB-2004-000483 Linux Kernel のインタプリタをロードする処理におけるバッファオーバーフローの脆弱性 ------------ CVE-2004-1072 9499 CVE-2004-1072 71464 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000483.html 2004-11-10 2007-04-01 View