SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   OS (Linux)  >   Linux Kernel Vendors:   kernel.org
Linux Kernel Overlapping VMAs May Let Local Users Obtain Root Privileges
SecurityTracker Alert ID:  1012885
SecurityTracker URL:  http://securitytracker.com/id/1012885
CVE Reference:   CVE-2005-0003   (Links to External Site)
Date:  Jan 13 2005
Impact:   Denial of service via local system, Execution of arbitrary code via local system, Root access via local system
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): 2.6
Description:   A vulnerability was reported in the Linux kernel in the procesing of ELF binaries on IA64 systems. A local user can cause denial of service conditions or potentially obtain root privileges on the target system.

The vendor reported that a local user can create a specially crafted binary that, when run on the target system, will cause the system to crash. The flaw occurs because the system does not properly check for overlapping virtual memory address allocations.

This bug is similar to that reported in Alert ID 1012165 [CVE: CVE-2004-1074], where a local user can obtain root level privileges.

Impact:   A local user can cause the target system to crash.

A local user may be able to execute arbitrary code with setuid privileges to obtain root access on the target system.

Solution:   The vendor has issued a patch for 2.6, available at:

http://linux.bkbits.net:8080/linux-2.6/cset@41a6721cce-LoPqkzKXudYby_3TUmg

Vendor URL:  www.kernel.org/ (Links to External Site)
Cause:   Access control error

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC