CVEvulnerability
CVE-2004-2731
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
Affected configurations
• linux linux kernel 2.4.0
• linux linux kernel 2.4.1
• linux linux kernel 2.4.2
• linux linux kernel 2.4.3
• linux linux kernel 2.4.4
• linux linux kernel 2.4.5
• linux linux kernel 2.4.6
• linux linux kernel 2.4.7
• linux linux kernel 2.4.8
• linux linux kernel 2.4.9
• linux linux kernel 2.4.9 pre5
• linux linux kernel 2.4.10
• linux linux kernel 2.4.11
• linux linux kernel 2.4.12
• linux linux kernel 2.4.13
• linux linux kernel 2.4.14
• linux linux kernel 2.4.15
• linux linux kernel 2.4.16
• linux linux kernel 2.4.17
• linux linux kernel 2.4.18
• linux linux kernel 2.4.19
• linux linux kernel 2.4.20
• linux linux kernel 2.4.21
• linux linux kernel 2.4.22
• linux linux kernel 2.4.23
• linux linux kernel 2.4.23 ow2
• linux linux kernel 2.4.24
• linux linux kernel 2.4.24 ow1
• linux linux kernel 2.4.25
• linux linux kernel 2.4.26
• linux linux kernel 2.4.27
• linux linux kernel 2.4.28
• linux linux kernel 2.4.29
• linux linux kernel 2.4.30
• linux linux kernel 2.4.31
• linux linux kernel 2.4.32
• linux linux kernel 2.4.33
• linux linux kernel 2.4.33.2
• linux linux kernel 2.4.33.3
• linux linux kernel 2.4.33.4
• linux linux kernel 2.4.33.5
• linux linux kernel 2.4.34
• linux linux kernel 2.4.34.1
• linux linux kernel 2.4.34.2
• linux linux kernel 2.4.35
• linux linux kernel 2.4.35.2
• linux linux kernel 2.6.0
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.3
• linux linux kernel 2.6.4
• linux linux kernel 2.6.5
• linux linux kernel 2.6.6
• linux linux kernel 2.6.7
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html Exploit
- http://secunia.com/advisories/11981 Vendor Advisory
- http://secunia.com/advisories/29058 secunia.com
- http://securitytracker.com/id?1010617 securitytracker.com
- http://www.debian.org/security/2008/dsa-1503 www.debian.org
- http://www.osvdb.org/7345 www.osvdb.org
- http://www.osvdb.org/8363 www.osvdb.org
- http://www.securiteam.com/unixfocus/5GP0515DFW.html Exploit
- http://www.securityfocus.com/bid/10632 www.securityfocus.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html Exploit
- http://secunia.com/advisories/11981 Vendor Advisory
- http://secunia.com/advisories/29058 secunia.com
- http://securitytracker.com/id?1010617 securitytracker.com
- http://www.debian.org/security/2008/dsa-1503 www.debian.org
- http://www.osvdb.org/7345 www.osvdb.org
- http://www.osvdb.org/8363 www.osvdb.org
- http://www.securiteam.com/unixfocus/5GP0515DFW.html Exploit
- http://www.securityfocus.com/bid/10632 www.securityfocus.com