CVE-2004-1235 Common Vulnerabilities and Exposures

Upstream information

CVE-2004-1235 at MITRE

Description

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	6.2
Vector	AV:L/AC:H/Au:N/C:C/I:C/A:C
Access Vector	Local
Access Complexity	High
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entry: 64492 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SA:2005:003, published Friday, Jan 21st 2005 16:00 MET
SUSE-SR:2005:001, published Wednesday, Jan 12th 2004 18:00 MEST

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 01:06:32 2013
CVE page last modified: Fri Dec 8 16:10:57 2023