Linux Kernel Overlapping VMAs May Let Local Users Obtain Root Privileges
|
|
SecurityTracker Alert ID: 1012885
|
|
SecurityTracker URL: http://securitytracker.com/id?1012885
|
|
CVE Reference: CAN-2005-0003
(Links to External Site)
|
Date: Jan 13 2005
|
Impact: Denial of service via local system, Execution of arbitrary code via local system, Root access via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.6
|
Description: A vulnerability was reported in the Linux kernel in the procesing of ELF binaries on IA64 systems. A local user can cause denial of service conditions or potentially obtain root privileges on the target system.
The vendor reported that a local user can create a specially crafted binary that, when run on the target system, will cause the system
to crash. The flaw occurs because the system does not properly check for overlapping virtual memory address allocations.
This
bug is similar to that reported in Alert ID 1012165 [CVE: CAN-2004-1074], where a local user can obtain root level privileges.
|
Impact: A local user can cause the target system to crash.
A local user may be able to execute arbitrary code with setuid privileges to obtain root access on the target system.
|
Solution: The vendor has issued a patch for 2.6, available at:
http://linux.bkbits.net:8080/linux-2.6/cset@41a6721cce-LoPqkzKXudYby_3TUmg
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Xandros)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 13 Jan 2005 02:36:03 -0500
Subject: [none]
|
CVE: CAN-2005-0003
A vulnerability was reported in the Linux kernel. A local user can create a specially
crafted binary that, when run on the target system, will cause the system to crash.
The flaw occurs because the system does not properly check for overlapping virtual
memory address allocations.
This bug is similar to that reported in CVE CAN-2004-1074.
IA64 architectures are affected.
Fixed upstream in 2.6:
http://linux.bkbits.net:8080/linux-2.6/cset@41a6721cce-LoPqkzKXudYby_3TUmg
|
|
