VulnerabilityModified
CVE-2004-0109
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
MEDIUM 4.6EPSS 0.56%
Does this matter?
Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.56% probability · 45th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- cve@mitre.org
References
- ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.ascPatch, Vendor Advisory
- ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
- http://marc.info/?l=bugtraq&m=108213675028441&w=2
- http://rhn.redhat.com/errata/RHSA-2004-166.htmlPatch, Vendor Advisory
- http://secunia.com/advisories/11361
- http://secunia.com/advisories/11362
- http://secunia.com/advisories/11373
- http://secunia.com/advisories/11429
- http://secunia.com/advisories/11464
- http://secunia.com/advisories/11469
- http://secunia.com/advisories/11470
- http://secunia.com/advisories/11486
- http://secunia.com/advisories/11494
- http://secunia.com/advisories/11518
- http://secunia.com/advisories/11626
- http://secunia.com/advisories/11861
- http://secunia.com/advisories/11891
- http://secunia.com/advisories/11986
- http://secunia.com/advisories/12003
- http://security.gentoo.org/glsa/glsa-200407-02.xml
- http://www.ciac.org/ciac/bulletins/o-121.shtml
- http://www.ciac.org/ciac/bulletins/o-127.shtml
- http://www.debian.org/security/2004/dsa-479
- http://www.debian.org/security/2004/dsa-480
- http://www.debian.org/security/2004/dsa-481
- http://www.debian.org/security/2004/dsa-482
- http://www.debian.org/security/2004/dsa-489
- http://www.debian.org/security/2004/dsa-491
- http://www.debian.org/security/2004/dsa-495
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.