Linux Kernel Multiple Unspecified Local Privilege Escalation Vulnerabilities
BID:10779
Info
Linux Kernel Multiple Unspecified Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 10779 |
| Class: | Unknown |
| CVE: |
CVE-2004-0496 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 22 2004 12:00AM |
| Updated: | Jul 12 2009 06:16AM |
| Credit: | This issue was disclosed in a Suse advisory. |
| Vulnerable: |
Linux kernel 2.6.7 rc1 Linux kernel 2.6.7 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 |
| Not Vulnerable: | |
Discussion
Linux Kernel Multiple Unspecified Local Privilege Escalation Vulnerabilities
Linux Kernel is reported prone to multiple unspecified privilege escalation vulnerabilities. These vulnerabilities may allow a local attacker to gain elevated privileges or disclose kernel memory.
These vulnerabilities were referenced in a SuSe advisory, however, further details are not currently available. It is possible that these issues are related to BID 10566 (Linux Kernel Multiple Device Driver Vulnerabilities). This BID will be updated or retired as more information becomes available.
It is reported that these issues present themselves in Linux kernel 2.6.
Linux Kernel is reported prone to multiple unspecified privilege escalation vulnerabilities. These vulnerabilities may allow a local attacker to gain elevated privileges or disclose kernel memory.
These vulnerabilities were referenced in a SuSe advisory, however, further details are not currently available. It is possible that these issues are related to BID 10566 (Linux Kernel Multiple Device Driver Vulnerabilities). This BID will be updated or retired as more information becomes available.
It is reported that these issues present themselves in Linux kernel 2.6.
Exploit / POC
Linux Kernel Multiple Unspecified Local Privilege Escalation Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Linux Kernel Multiple Unspecified Local Privilege Escalation Vulnerabilities
Solution:
Suse has released an advisory (SUSE-SA:2004:020) to address this issue. Please see the referenced advisory for more information.
Gentoo has released an advisory (GLSA 200407-16) to address this issue. Please see the referenced advisory for more information.
Gentoo users can upgrade their computers by carrying out the following commands:
emerge sync
emerge -pv your-favorite-sources
emerge your-favorite-sources
Solution:
Suse has released an advisory (SUSE-SA:2004:020) to address this issue. Please see the referenced advisory for more information.
Gentoo has released an advisory (GLSA 200407-16) to address this issue. Please see the referenced advisory for more information.
Gentoo users can upgrade their computers by carrying out the following commands:
emerge sync
emerge -pv your-favorite-sources
emerge your-favorite-sources
References
Linux Kernel Multiple Unspecified Local Privilege Escalation Vulnerabilities
References:
References: