Oval Definition:	oval:org.mitre.oval:def:11195
Revision Date: 2013-04-29 Version: 11 Title: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code. Description: The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2004-1072 Platform(s): CentOS Linux 3 Red Hat Enterprise Linux 3 Product(s): Definition Synopsis RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section kernel-BOOT is earlier than 0:2.4.21-20.0.1.EL OR kernel-unsupported is earlier than 0:2.4.21-20.0.1.EL OR kernel-smp-unsupported is earlier than 0:2.4.21-20.0.1.EL OR kernel-hugemem-unsupported is earlier than 0:2.4.21-20.0.1.EL OR kernel-hugemem is earlier than 0:2.4.21-20.0.1.EL OR kernel is earlier than 0:2.4.21-20.0.1.EL OR kernel-source is earlier than 0:2.4.21-20.0.1.EL OR kernel-doc is earlier than 0:2.4.21-20.0.1.EL OR kernel-smp is earlier than 0:2.4.21-20.0.1.EL
BACK