NetSight
low2.1Public exploit code

CVE-2004-1073

The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Versions core_2.0, core_3.0
RedhatLinux Advanced Workstation
Version 2.1
SuseSuse Linux
Versions 1.0, 8, 8.1, 8.2, 9.0, 9.1
TrustixSecure Linux
Versions 1.5, 2.0, 2.1, 2.2
TurbolinuxTurbolinux Server
Version 10.0

References