ID CVE-2005-0666
Summary Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
References
Vulnerable Configurations
  • cpe:2.3:a:the_pax_team:pax_linux:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.20:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.20:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.21:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.21:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.22:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.22:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.23:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.23:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.24:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.24:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.25:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.25:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.26:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.26:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.27:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.27:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.4.28:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.4.28:*:*:*:*:*:*:*
  • cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 05-09-2008 - 20:46)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 12729
bugtraq 20050305 PaX privilege elevation security bug
secunia 14489
Last major update 05-09-2008 - 20:46
Published 02-05-2005 - 04:00
Last modified 05-09-2008 - 20:46
Back to Top