CVEvulnerability
CVE-2004-0109
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
Affected configurations
• linux linux kernel 2.4.0
• linux linux kernel 2.5.0
• linux linux kernel 2.6.0
References
- ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc Patch, Vendor Advisory
- ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc patches.sgi.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=108213675028441&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2004-166.html Patch, Vendor Advisory
- http://secunia.com/advisories/11361 secunia.com
- http://secunia.com/advisories/11362 secunia.com
- http://secunia.com/advisories/11373 secunia.com
- http://secunia.com/advisories/11429 secunia.com
- http://secunia.com/advisories/11464 secunia.com
- http://secunia.com/advisories/11469 secunia.com
- http://secunia.com/advisories/11470 secunia.com
- http://secunia.com/advisories/11486 secunia.com
- http://secunia.com/advisories/11494 secunia.com
- http://secunia.com/advisories/11518 secunia.com
- http://secunia.com/advisories/11626 secunia.com
- http://secunia.com/advisories/11861 secunia.com
- http://secunia.com/advisories/11891 secunia.com
- http://secunia.com/advisories/11986 secunia.com
- http://secunia.com/advisories/12003 secunia.com
- http://security.gentoo.org/glsa/glsa-200407-02.xml security.gentoo.org
- http://www.ciac.org/ciac/bulletins/o-121.shtml www.ciac.org
- http://www.ciac.org/ciac/bulletins/o-127.shtml www.ciac.org
- http://www.debian.org/security/2004/dsa-479 www.debian.org
- http://www.debian.org/security/2004/dsa-480 www.debian.org
- http://www.debian.org/security/2004/dsa-481 www.debian.org
- http://www.debian.org/security/2004/dsa-482 www.debian.org
- http://www.debian.org/security/2004/dsa-489 www.debian.org
- http://www.debian.org/security/2004/dsa-491 www.debian.org
- http://www.debian.org/security/2004/dsa-495 www.debian.org
- http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities Vendor Advisory
- http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:029 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2004_09_kernel.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2004-105.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2004-106.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2004-183.html www.redhat.com
- http://www.securityfocus.com/bid/10141 www.securityfocus.com
- http://www.turbolinux.com/security/2004/TLSA-2004-14.txt www.turbolinux.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15866 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc Patch, Vendor Advisory
- ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc patches.sgi.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=108213675028441&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2004-166.html Patch, Vendor Advisory
- http://secunia.com/advisories/11361 secunia.com
- http://secunia.com/advisories/11362 secunia.com
- http://secunia.com/advisories/11373 secunia.com
- http://secunia.com/advisories/11429 secunia.com
- http://secunia.com/advisories/11464 secunia.com
- http://secunia.com/advisories/11469 secunia.com
- http://secunia.com/advisories/11470 secunia.com
- http://secunia.com/advisories/11486 secunia.com
- http://secunia.com/advisories/11494 secunia.com
- http://secunia.com/advisories/11518 secunia.com
- http://secunia.com/advisories/11626 secunia.com
- http://secunia.com/advisories/11861 secunia.com
- http://secunia.com/advisories/11891 secunia.com
- http://secunia.com/advisories/11986 secunia.com
- http://secunia.com/advisories/12003 secunia.com
- http://security.gentoo.org/glsa/glsa-200407-02.xml security.gentoo.org
- http://www.ciac.org/ciac/bulletins/o-121.shtml www.ciac.org
- http://www.ciac.org/ciac/bulletins/o-127.shtml www.ciac.org
- http://www.debian.org/security/2004/dsa-479 www.debian.org
- http://www.debian.org/security/2004/dsa-480 www.debian.org
- http://www.debian.org/security/2004/dsa-481 www.debian.org
- http://www.debian.org/security/2004/dsa-482 www.debian.org
- http://www.debian.org/security/2004/dsa-489 www.debian.org
- http://www.debian.org/security/2004/dsa-491 www.debian.org
- http://www.debian.org/security/2004/dsa-495 www.debian.org
- http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities Vendor Advisory
- http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:029 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2004_09_kernel.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2004-105.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2004-106.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2004-183.html www.redhat.com
- http://www.securityfocus.com/bid/10141 www.securityfocus.com