Lucene search
HistoryOct 09, 2007 - 10:00 a.m.
CVE-2004-2731
cve-2004-2731
integer overflow
sbus prom driver
linux kernel
arbitrary code execution
nvd
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
Affected configurations
Node
linuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.0test1
ORlinuxlinux_kernelMatch2.4.0test10
ORlinuxlinux_kernelMatch2.4.0test11
ORlinuxlinux_kernelMatch2.4.0test12
ORlinuxlinux_kernelMatch2.4.0test2
ORlinuxlinux_kernelMatch2.4.0test3
ORlinuxlinux_kernelMatch2.4.0test4
ORlinuxlinux_kernelMatch2.4.0test5
ORlinuxlinux_kernelMatch2.4.0test6
ORlinuxlinux_kernelMatch2.4.0test7
ORlinuxlinux_kernelMatch2.4.0test8
ORlinuxlinux_kernelMatch2.4.0test9
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.2
ORlinuxlinux_kernelMatch2.4.3
ORlinuxlinux_kernelMatch2.4.3pre3
ORlinuxlinux_kernelMatch2.4.4
ORlinuxlinux_kernelMatch2.4.5
ORlinuxlinux_kernelMatch2.4.6
ORlinuxlinux_kernelMatch2.4.7
ORlinuxlinux_kernelMatch2.4.8
ORlinuxlinux_kernelMatch2.4.9
ORlinuxlinux_kernelMatch2.4.9_pre5
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.11pre3
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
ORlinuxlinux_kernelMatch2.4.18pre1
ORlinuxlinux_kernelMatch2.4.18pre2
ORlinuxlinux_kernelMatch2.4.18pre3
ORlinuxlinux_kernelMatch2.4.18pre4
ORlinuxlinux_kernelMatch2.4.18pre5
ORlinuxlinux_kernelMatch2.4.18pre6
ORlinuxlinux_kernelMatch2.4.18pre7
ORlinuxlinux_kernelMatch2.4.18pre8
ORlinuxlinux_kernelMatch2.4.18pre9
ORlinuxlinux_kernelMatch2.4.19
ORlinuxlinux_kernelMatch2.4.19pre1
ORlinuxlinux_kernelMatch2.4.19pre2
ORlinuxlinux_kernelMatch2.4.19pre3
ORlinuxlinux_kernelMatch2.4.19pre4
ORlinuxlinux_kernelMatch2.4.19pre5
ORlinuxlinux_kernelMatch2.4.19pre6
ORlinuxlinux_kernelMatch2.4.20
ORlinuxlinux_kernelMatch2.4.21
ORlinuxlinux_kernelMatch2.4.21pre1
ORlinuxlinux_kernelMatch2.4.21pre4
ORlinuxlinux_kernelMatch2.4.21pre7
ORlinuxlinux_kernelMatch2.4.22
ORlinuxlinux_kernelMatch2.4.22pre10
ORlinuxlinux_kernelMatch2.4.23
ORlinuxlinux_kernelMatch2.4.23pre9
ORlinuxlinux_kernelMatch2.4.23_ow2
ORlinuxlinux_kernelMatch2.4.24
ORlinuxlinux_kernelMatch2.4.24_ow1
ORlinuxlinux_kernelMatch2.4.25
ORlinuxlinux_kernelMatch2.4.26
ORlinuxlinux_kernelMatch2.4.27
ORlinuxlinux_kernelMatch2.4.27pre1
ORlinuxlinux_kernelMatch2.4.27pre2
ORlinuxlinux_kernelMatch2.4.27pre3
ORlinuxlinux_kernelMatch2.4.27pre4
ORlinuxlinux_kernelMatch2.4.27pre5
ORlinuxlinux_kernelMatch2.4.28
ORlinuxlinux_kernelMatch2.4.29
ORlinuxlinux_kernelMatch2.4.29rc1
ORlinuxlinux_kernelMatch2.4.29rc2
ORlinuxlinux_kernelMatch2.4.30
ORlinuxlinux_kernelMatch2.4.30rc2
ORlinuxlinux_kernelMatch2.4.30rc3
ORlinuxlinux_kernelMatch2.4.31
ORlinuxlinux_kernelMatch2.4.31pre1
ORlinuxlinux_kernelMatch2.4.32
ORlinuxlinux_kernelMatch2.4.32pre1
ORlinuxlinux_kernelMatch2.4.32pre2
ORlinuxlinux_kernelMatch2.4.33
ORlinuxlinux_kernelMatch2.4.33pre1
ORlinuxlinux_kernelMatch2.4.33.2
ORlinuxlinux_kernelMatch2.4.33.3
ORlinuxlinux_kernelMatch2.4.33.4
ORlinuxlinux_kernelMatch2.4.33.5
ORlinuxlinux_kernelMatch2.4.34
ORlinuxlinux_kernelMatch2.4.34rc3
ORlinuxlinux_kernelMatch2.4.34.1
ORlinuxlinux_kernelMatch2.4.34.2
ORlinuxlinux_kernelMatch2.4.35
ORlinuxlinux_kernelMatch2.4.35.2
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.7
References
Related
cvelist
cvelist
CVE-2004-2731
2007-10-09 10:00:00
nvd
nvd
CVE-2004-2731
2004-12-31 05:00:00
openvas
openvas
Debian: Security Advisory (DSA-1503-2)
2008-03-11 00:00:00
Debian Security Advisory DSA 1503-1 (kernel-source-2.4.27 (2.4.27-10sarge6))
2008-02-28 00:00:00
Debian Security Advisory DSA 1503-2 (kernel-source-2.4.27 (2.4.27-10sarge7))
2008-03-11 00:00:00
osv
osv
kernel-source-2.4.27 - several vulnerabilities
2008-02-22 00:00:00
kernelimage-2.4.27 - several issues
2008-02-22 00:00:00
debian
debian
[SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues
2008-03-06 07:47:54
[SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues
2008-02-22 20:55:49
nessus
nessus
Debian DSA-1503-1 : kernel-source-2.4.27 - several vulnerabilities
2008-02-25 00:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2004-2731