正文

linux_kernel 缓冲区溢出代码执行漏洞

admin
admin V管理员 /0 评论 /7 阅读
0413
此篇文章发布距今已超过1124天，您需要注意文章的内容或图片是否可用！

CVE编号

CVE-2004-0109

利用情况

暂无

补丁情况

N/A

披露时间

2004-06-01
漏洞描述
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc
ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
http://marc.info/?l=bugtraq&m=108213675028441&w=2
http://rhn.redhat.com/errata/RHSA-2004-166.html
http://secunia.com/advisories/11361
http://secunia.com/advisories/11362
http://secunia.com/advisories/11373
http://secunia.com/advisories/11429
http://secunia.com/advisories/11464
http://secunia.com/advisories/11469
http://secunia.com/advisories/11470
http://secunia.com/advisories/11486
http://secunia.com/advisories/11494
http://secunia.com/advisories/11518
http://secunia.com/advisories/11626
http://secunia.com/advisories/11861
http://secunia.com/advisories/11891
http://secunia.com/advisories/11986
http://secunia.com/advisories/12003
http://security.gentoo.org/glsa/glsa-200407-02.xml
http://www.ciac.org/ciac/bulletins/o-121.shtml
http://www.ciac.org/ciac/bulletins/o-127.shtml
http://www.debian.org/security/2004/dsa-479
http://www.debian.org/security/2004/dsa-480
http://www.debian.org/security/2004/dsa-481
http://www.debian.org/security/2004/dsa-482
http://www.debian.org/security/2004/dsa-489
http://www.debian.org/security/2004/dsa-491
http://www.debian.org/security/2004/dsa-495
http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities
http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
http://www.mandriva.com/security/advisories?name=MDKSA-2004:029
http://www.novell.com/linux/security/advisories/2004_09_kernel.html
http://www.redhat.com/support/errata/RHSA-2004-105.html
http://www.redhat.com/support/errata/RHSA-2004-106.html
http://www.redhat.com/support/errata/RHSA-2004-183.html
http://www.securityfocus.com/bid/10141
http://www.turbolinux.com/security/2004/TLSA-2004-14.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/15866
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 linux linux_kernel 2.4.0 -
运行在以下环境
系统 linux linux_kernel 2.5.0 -
运行在以下环境
系统 linux linux_kernel 2.6.0 -
CVSS3评分 4.6
  • 攻击路径 本地
  • 攻击复杂度 低
  • 权限要求 无
  • 影响范围 N/A
  • 用户交互 无
  • 可用性 部分地
  • 保密性 部分地
  • 完整性 部分地
AV:L/AC:L/Au:N/C:P/I:P/A:P CWE-ID 漏洞类型 NVD-CWE-Other