NetSight
IP …
high7.2

CVE-2004-1070

The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return …

Impact

The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Versions core_2.0, core_3.0
RedhatLinux Advanced Workstation
Version 2.1
SuseSuse Linux
Versions 1.0, 8, 8.1, 8.2, 9.0, 9.1
TrustixSecure Linux
Versions 1.5, 2.0, 2.1, 2.2
TurbolinuxTurbolinux Server
Version 10.0

References