| Max CVSS | 7.2 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-1068 | 6.2 |
A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-1073 | 2.1 |
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-1070 | 7.2 |
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensit
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-0949 | 6.4 |
The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-0685 | 4.6 |
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
|
11-10-2017 - 01:29 | 23-12-2004 - 05:00 | |
| CVE-2004-0883 | 6.4 |
Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requ
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-1071 | 7.2 |
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-1072 | 7.2 |
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows
|
11-10-2017 - 01:29 | 10-01-2005 - 05:00 | |
| CVE-2004-0177 | 5.0 |
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain por
|
11-10-2017 - 01:29 | 01-06-2004 - 04:00 | |
| CVE-2004-0138 | 4.9 |
The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.
|
11-10-2017 - 01:29 | 31-12-2004 - 05:00 | |
| CVE-2004-0565 | 2.1 |
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
|
11-10-2017 - 01:29 | 06-12-2004 - 05:00 | |
| CVE-2004-0181 | 2.1 |
The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.
|
11-10-2017 - 01:29 | 01-06-2004 - 04:00 |