National Cyber Awareness System

Vulnerability Summary for CVE-2004-1235

Overview

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 12190

Type: Advisory; Patch Information; Exploit

Hyperlink:http://www.securityfocus.com/bid/12190

External Source: REDHAT

Name: RHSA-2005:043

Type: Advisory; Patch Information

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-043.html

External Source: FEDORA

Name: FLSA:2336

Hyperlink:https://bugzilla.fedora.us/show_bug.cgi?id=2336

External Source: XF

Name: linux-uselib-gain-privileges(18800)

Hyperlink:http://xforce.iss.net/xforce/xfdb/18800

External Source: TRUSTIX

Name: 2005-0001

Hyperlink:http://www.trustix.org/errata/2005/0001/

External Source: FEDORA

Name: FEDORA-2005-013

Hyperlink:http://www.securityfocus.com/advisories/7806

External Source: FEDORA

Name: FEDORA-2005-014

Hyperlink:http://www.securityfocus.com/advisories/7805

External Source: CONFIRM

Name: http://www.securityfocus.com/advisories/7804

Hyperlink:http://www.securityfocus.com/advisories/7804

External Source: REDHAT

Name: RHSA-2005:092

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-092.html

External Source: OVAL

Name: oval:org.mitre.oval:def:9567

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9567

External Source: MISC

Name: http://isec.pl/vulnerabilities/isec-0021-uselib.txt

Hyperlink:http://isec.pl/vulnerabilities/isec-0021-uselib.txt

External Source: CONECTIVA

Name: CLA-2005:930

Hyperlink:http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930

External Source: REDHAT

Name: RHSA-2005:017

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-017.html

External Source: REDHAT

Name: RHSA-2005:016

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-016.html

External Source: SUSE

Name: SUSE-SR:2005:001

Hyperlink:http://www.novell.com/linux/security/advisories/2005_01_sr.html

External Source: MANDRAKE

Name: MDKSA-2005:022

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:022

External Source: DEBIAN

Name: DSA-1082

Hyperlink:http://www.debian.org/security/2006/dsa-1082

External Source: DEBIAN

Name: DSA-1070

Hyperlink:http://www.debian.org/security/2006/dsa-1070

External Source: DEBIAN

Name: DSA-1069

Hyperlink:http://www.debian.org/security/2006/dsa-1069

External Source: DEBIAN

Name: DSA-1067

Hyperlink:http://www.debian.org/security/2006/dsa-1067

External Source: SECUNIA

Name: 20338

Hyperlink:http://secunia.com/advisories/20338

External Source: SECUNIA

Name: 20202

Hyperlink:http://secunia.com/advisories/20202

External Source: SECUNIA

Name: 20163

Hyperlink:http://secunia.com/advisories/20163

External Source: SECUNIA

Name: 20162

Hyperlink:http://secunia.com/advisories/20162

External Source: BUGTRAQ

Name: 20050107 Linux kernel sys_uselib local root vulnerability

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=110512575901427&w=2

References to Check Content

Identifier:oval:org.mitre.oval:def:9567

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9567