CVE-2004-1235
6.2
Vector
AV:L/AC:H/Au:N/C:C/I:C/A:C
Exploitability: 1.9 / Impact: 10.0
Source: NVD
Description
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Affected (147)
Products: Avaya: Converged Communications Server, Mn100, Modular Messaging Message Storage Server, Network Routing, S8710, Intuity Audix, S8300, S8500, S8700 · Linux: Linux Kernel · Mandrakesoft: Mandrake Linux, Mandrake Linux Corporate Server, Mandrake Multi Network Firewall · +4 more
Show all products
Avaya: Converged Communications Server, Mn100, Modular Messaging Message Storage Server, Network Routing, S8710, Intuity Audix, S8300, S8500, S8700 · Linux: Linux Kernel · Mandrakesoft: Mandrake Linux, Mandrake Linux Corporate Server, Mandrake Multi Network Firewall · Redhat: Enterprise Linux, Enterprise Linux Desktop, Fedora Core, Linux · Suse: Suse Linux · Ubuntu: Ubuntu Linux · Conectiva: Linux
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.0 | |
| All versions | |
| Version 1.1 | |
| All versions | |
| Version r2.0.0 | |
| Version 2.4.0 | |
| Version 10.0 | |
| Version 2.1 | |
| Version 3.0 | |
| Version 3.0 | |
| Version core_1.0 | |
| Version 7.3 | |
| Version 1.0 | |
| Version 4.1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| Version r2.0.0 | |
| Version r2.0.0 | |
| Version r2.0.0 | |
| Version 10.0 | |
| Version 8.2 |
References (50)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.