正文

linux_kernel 权限提升漏洞

admin
admin V管理员 /0 评论 /7 阅读
0413
此篇文章发布距今已超过1118天，您需要注意文章的内容或图片是否可用！

CVE编号

CVE-2004-0003

利用情况

暂无

补丁情况

N/A

披露时间

2004-03-03
漏洞描述
2.4.22之前的Linux内核中的未知漏洞允许本地用户获得与“ R128 DRI限制检查”有关的特权。
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
http://secunia.com/advisories/10782
http://secunia.com/advisories/10911
http://secunia.com/advisories/10912
http://secunia.com/advisories/11202
http://secunia.com/advisories/11361
http://secunia.com/advisories/11362
http://secunia.com/advisories/11369
http://secunia.com/advisories/11370
http://secunia.com/advisories/11376
http://secunia.com/advisories/11464
http://secunia.com/advisories/11891
http://secunia.com/advisories/12075
http://www.ciac.org/ciac/bulletins/o-082.shtml
http://www.ciac.org/ciac/bulletins/o-121.shtml
http://www.ciac.org/ciac/bulletins/o-126.shtml
http://www.ciac.org/ciac/bulletins/o-127.shtml
http://www.ciac.org/ciac/bulletins/o-145.shtml
http://www.debian.org/security/2004/dsa-479
http://www.debian.org/security/2004/dsa-480
http://www.debian.org/security/2004/dsa-481
http://www.debian.org/security/2004/dsa-482
http://www.debian.org/security/2004/dsa-489
http://www.debian.org/security/2004/dsa-491
http://www.debian.org/security/2004/dsa-495
http://www.linuxcompatible.org/print25630.html
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:029
http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html
http://www.redhat.com/support/errata/RHSA-2004-044.html
http://www.redhat.com/support/errata/RHSA-2004-065.html
http://www.redhat.com/support/errata/RHSA-2004-106.html
http://www.redhat.com/support/errata/RHSA-2004-166.html
http://www.securityfocus.com/bid/9570
http://www.turbolinux.com/security/2004/TLSA-2004-14.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/15029
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 linux linux_kernel * Up to
(including)
2.4.22
CVSS3评分 4.6
  • 攻击路径 本地
  • 攻击复杂度 低
  • 权限要求 无
  • 影响范围 N/A
  • 用户交互 无
  • 可用性 部分地
  • 保密性 部分地
  • 完整性 部分地
AV:L/AC:L/Au:N/C:P/I:P/A:P CWE-ID 漏洞类型 NVD-CWE-Other