[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0109Date: (C)2004-06-01   (M)2023-12-22


Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-10141
SECUNIA-11361
SECUNIA-11362
SECUNIA-11373
SECUNIA-11429
SECUNIA-11464
SECUNIA-11469
SECUNIA-11470
SECUNIA-11486
SECUNIA-11494
SECUNIA-11518
SECUNIA-11626
SECUNIA-11861
SECUNIA-11891
SECUNIA-11986
SECUNIA-12003
2004-0020
20040405-01-U
20040504-01-U
CLA-2004:846
DSA-479
DSA-480
DSA-481
DSA-482
DSA-489
DSA-491
DSA-495
ESA-20040428-004
GLSA-200407-02
MDKSA-2004:029
O-121
O-127
RHSA-2004:105
RHSA-2004:106
RHSA-2004:166
RHSA-2004:183
SuSE-SA:2004:009
TLSA-2004-14
http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities
linux-iso9660-bo(15866)
oval:org.mitre.oval:def:10733
oval:org.mitre.oval:def:940

CPE    3
cpe:/o:linux:linux_kernel:2.5.0
cpe:/o:linux:linux_kernel:2.4.0
cpe:/o:linux:linux_kernel:2.6.0

© SecPod Technologies