low2.1Public exploit code
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel < 2.6.7-rc3 (Slackware 9.1 / Debian 3.0) - 'sys_chown()' Group Ownership Alteration Privilege Escalation2004-12-24 · local · linux · Verified
Impact
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mandrakesoft | Mandrake Multi Network Firewall | Version 8.2 |
| Conectiva | Linux | Version 10 |
| Gentoo | Linux | All versions |
| Linux | Linux Kernel | Version 2.0 |
| Mandrakesoft | Mandrake Linux | Versions 9.1, 9.2, 10.0 |
| Mandrakesoft | Mandrake Linux Corporate Server | Version 2.1 |
| Redhat | Enterprise Linux | Versions 2.1, 3.0 |
| Suse | Suse Linux | Versions 8.0, 8.1, 8.2, 9.0, 9.1 |
| Trustix | Secure Linux | Versions 2, 2.0, 2.1 |
References
- NVD record
- CVE.org record
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066
- http://www.novell.com/linux/security/advisories/2004_20_kernel.html
- http://www.redhat.com/support/errata/RHSA-2004-354.html
- http://www.redhat.com/support/errata/RHSA-2004-360.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16599
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9867
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852
- http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066
- http://www.novell.com/linux/security/advisories/2004_20_kernel.html
- http://www.redhat.com/support/errata/RHSA-2004-354.html
- http://www.redhat.com/support/errata/RHSA-2004-360.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16599
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9867