Description
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15866 ↗
- http://secunia.com/advisories/11626 ↗
- http://secunia.com/advisories/11464 ↗
- http://www.redhat.com/support/errata/RHSA-2004-105.html ↗
- http://www.ciac.org/ciac/bulletins/o-127.shtml ↗
- http://secunia.com/advisories/11518 ↗
- http://marc.info/?l=bugtraq&m=108213675028441&w=2 ↗
- http://www.debian.org/security/2004/dsa-482 ↗
- http://secunia.com/advisories/11861 ↗
- http://secunia.com/advisories/11362 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940 ↗
- http://www.debian.org/security/2004/dsa-495 ↗
- http://www.redhat.com/support/errata/RHSA-2004-183.html ↗
- http://www.debian.org/security/2004/dsa-479 ↗
- http://secunia.com/advisories/12003 ↗
- http://secunia.com/advisories/11891 ↗
- http://www.novell.com/linux/security/advisories/2004_09_kernel.html ↗
- http://secunia.com/advisories/11469 ↗
- http://secunia.com/advisories/11486 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733 ↗
- http://www.debian.org/security/2004/dsa-480 ↗
- http://www.turbolinux.com/security/2004/TLSA-2004-14.txt ↗
- http://www.securityfocus.com/bid/10141 ↗
- http://secunia.com/advisories/11986 ↗
- http://secunia.com/advisories/11470 ↗
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846 ↗
- http://secunia.com/advisories/11361 ↗
- http://www.debian.org/security/2004/dsa-489 ↗
- http://www.debian.org/security/2004/dsa-481 ↗
- http://secunia.com/advisories/11373 ↗
- http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html ↗
- http://www.redhat.com/support/errata/RHSA-2004-106.html ↗
- http://www.ciac.org/ciac/bulletins/o-121.shtml ↗
- http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities ↗
- http://secunia.com/advisories/11429 ↗
- http://secunia.com/advisories/11494 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:029 ↗
- http://security.gentoo.org/glsa/glsa-200407-02.xml ↗
- http://rhn.redhat.com/errata/RHSA-2004-166.html ↗
- http://www.debian.org/security/2004/dsa-491 ↗