NetSight
IP …
medium6.2Public exploit code

CVE-2004-1235

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows lo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

Affected products

VendorProductAffected versions
AvayaMn100
All versions
AvayaNetwork Routing
All versions
AvayaConverged Communications Server
Version 2.0
AvayaS8710
Versions r2.0.0, r2.0.1
AvayaModular Messaging Message Storage Server
Versions 1.1, 2.0
LinuxLinux Kernel
Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5
MandrakesoftMandrake Linux
Versions 9.2, 10.0, 10.1
MandrakesoftMandrake Linux Corporate Server
Versions 2.1, 3.0
RedhatEnterprise Linux
Versions 3.0, 4.0
RedhatEnterprise Linux Desktop
Versions 3.0, 4.0
RedhatFedora Core
Versions core_1.0, core_2.0, core_3.0
RedhatLinux
Versions 7.3, 9.0

References