NetSight
low2.1Public exploit code

CVE-2004-0554

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.

Affected products

VendorProductAffected versions
AvayaConverged Communications Server
Version 2.0
AvayaModular Messaging Message Storage Server
Version s3400
GentooLinux
Version 1.4
LinuxLinux Kernel
Versions 2.4.18, 2.4.19, 2.4.21, 2.4.22, 2.4.23, 2.4.24
RedhatEnterprise Linux
Versions 2.1, 3.0
SuseSuse Linux
Versions 7, 8, 8.0, 8.1, 8.2, 9.0
AvayaIntuity Audix
All versions
SuseSuse Email Server
Versions 3.1, iii
SuseSuse Linux Admin-Cd For Firewall
All versions
SuseSuse Linux Connectivity Server
All versions
SuseSuse Linux Database Server
All versions
SuseSuse Linux Firewall Cd
All versions

References