high7.2Public exploit code

CVE-2004-0077

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Local Privilege Escalation2004-03-01 · local · linux · Verified
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Validator2004-02-18 · local · linux · Verified

Impact

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.

Affected products

Vendor	Product	Affected versions
Redhat	Bigmem Kernel	Version 2.4.20-8
Redhat	Kernel	Version 2.4.20-8
Redhat	Kernel Doc	Version 2.4.20-8
Redhat	Kernel Source	Version 2.4.20-8
Linux	Linux Kernel	Versions 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5
Netwosix	Netwosix Linux	Version 1.0
Trustix	Secure Linux	Versions 1.5, 2.0

Public exploit code

Impact

Affected products

References