CVE-2004-0109

Description (CNA)

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/15866
• http://secunia.com/advisories/11626
• http://secunia.com/advisories/11464
• http://www.redhat.com/support/errata/RHSA-2004-105.html
• http://www.ciac.org/ciac/bulletins/o-127.shtml
• http://secunia.com/advisories/11518
• http://marc.info/?l=bugtraq&m=108213675028441&w=2
• http://www.debian.org/security/2004/dsa-482
• http://secunia.com/advisories/11861
• http://secunia.com/advisories/11362
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940
• http://www.debian.org/security/2004/dsa-495
• http://www.redhat.com/support/errata/RHSA-2004-183.html
• http://www.debian.org/security/2004/dsa-479
• http://secunia.com/advisories/12003
• http://secunia.com/advisories/11891
• http://www.novell.com/linux/security/advisories/2004_09_kernel.html
• http://secunia.com/advisories/11469
• http://secunia.com/advisories/11486
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733
• http://www.debian.org/security/2004/dsa-480
• http://www.turbolinux.com/security/2004/TLSA-2004-14.txt
• http://www.securityfocus.com/bid/10141
• http://secunia.com/advisories/11986
• http://secunia.com/advisories/11470
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
• http://secunia.com/advisories/11361
• http://www.debian.org/security/2004/dsa-489
• http://www.debian.org/security/2004/dsa-481
• http://secunia.com/advisories/11373
• http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
• http://www.redhat.com/support/errata/RHSA-2004-106.html
• http://www.ciac.org/ciac/bulletins/o-121.shtml
• http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities
• http://secunia.com/advisories/11429
• http://secunia.com/advisories/11494
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:029
• http://security.gentoo.org/glsa/glsa-200407-02.xml
• http://rhn.redhat.com/errata/RHSA-2004-166.html
• http://www.debian.org/security/2004/dsa-491

ADP enrichment