Vulnerability Name:

CVE-2004-1073 (CCN-20038)

Assigned:2004-11-10
Published:2004-11-10
Updated:2017-10-11
Summary:The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
CVSS v3 Severity:3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2004-1073

Source: MITRE
Type: CNA
CVE-2005-1075

Source: CCN
Type: RHSA-2004-504
Updated Itanium kernel packages resolve security issues

Source: CCN
Type: RHSA-2004-505
Updated kernel packages fix security vulnerability

Source: CCN
Type: RHSA-2004-549
kernel security update

Source: CCN
Type: RHSA-2005-293
kernel security update

Source: CCN
Type: RHSA-2006-0190
kernel security update

Source: CCN
Type: RHSA-2006-0191
kernel security update

Source: CCN
Type: Dcrab 's Security Advisory
Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2

Source: CCN
Type: SA14906
RadBids Gold Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
18684

Source: SECUNIA
Type: UNKNOWN
20162

Source: SECUNIA
Type: UNKNOWN
20163

Source: SECUNIA
Type: UNKNOWN
20202

Source: SECUNIA
Type: UNKNOWN
20338

Source: DEBIAN
Type: UNKNOWN
DSA-1067

Source: DEBIAN
Type: UNKNOWN
DSA-1069

Source: DEBIAN
Type: UNKNOWN
DSA-1070

Source: DEBIAN
Type: UNKNOWN
DSA-1082

Source: DEBIAN
Type: DSA-1067
kernel-source-2.4.16 -- several vulnerabilities

Source: DEBIAN
Type: DSA-1069
kernel-source-2.4.18 -- several vulnerabilities

Source: DEBIAN
Type: DSA-1070
kernel-source-2.4.19 -- several vulnerabilities

Source: DEBIAN
Type: DSA-1082
kernel-source-2.4.17 -- several vulnerabilities

Source: DEBIAN
Type: DSA-1286
linux-2.6 -- several vulnerabilities

Source: DEBIAN
Type: DSA-1304
kernel-source-2.6.8 -- several vulnerabilities

Source: MISC
Type: UNKNOWN
http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2005:022

Source: CCN
Type: OSVDB ID: 15430
RadBids Gold faq.php farea Parameter XSS

Source: CCN
Type: OSVDB ID: 15431
RadBids Gold index.php Multiple Parameter XSS

Source: CCN
Type: RadScripts Web site
RadScripts: php auction software php auction scripts

Source: REDHAT
Type: UNKNOWN
RHSA-2004:504

Source: REDHAT
Type: UNKNOWN
RHSA-2004:505

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2004:549

Source: REDHAT
Type: UNKNOWN
RHSA-2005:293

Source: REDHAT
Type: UNKNOWN
RHSA-2006:0190

Source: REDHAT
Type: UNKNOWN
RHSA-2006:0191

Source: BID
Type: UNKNOWN
11646

Source: CCN
Type: BID-11646
Linux Kernel BINFMT_ELF Loader Local Privilege Escalation Vulnerabilities

Source: CCN
Type: BID-13080
RadScripts RadBids Gold Multiple Vulnerabilities

Source: CCN
Type: TLSA-2004-34
Security & Bugfix

Source: FEDORA
Type: UNKNOWN
FLSA:2336

Source: XF
Type: UNKNOWN
linux-elf-setuid-gain-privileges(18025)

Source: XF
Type: UNKNOWN
radbids-gold-php-xss(20038)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:11503

Source: SUSE
Type: SUSE-SA:2004:042
kernel: local and remote denial of service

Source: SUSE
Type: SUSE-SR:2004:002
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2004:003
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/o:linux:linux_kernel:2.4.0:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.3:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.11:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.21:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.22:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.23:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.27:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.1:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.2:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.3:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.4:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.5:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.6:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.7:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:9.2:*:*:*:*:*:*:*
  • OR cpe:/o:trustix:secure_linux:1.5:*:*:*:*:*:*:*
  • OR cpe:/o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
  • OR cpe:/o:trustix:secure_linux:2.1:*:*:*:*:*:*:*
  • OR cpe:/o:trustix:secure_linux:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:turbolinux:turbolinux:10.0:*:*:*:server:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20041073
    V
    		CVE-2004-1073
    2015-11-16
    oval:org.mitre.oval:def:18892
    P
    		DSA-1286-1 linux-2.6
    2014-06-23
    oval:org.mitre.oval:def:11503
    V
    		The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
    2013-04-29
    oval:org.debian:def:1082
    V
    		several vulnerabilities
    2006-05-29
    oval:org.debian:def:1070
    V
    		several vulnerabilities
    2006-05-21
    oval:org.debian:def:1067
    V
    		several vulnerabilities
    2006-05-20
    oval:org.debian:def:1069
    V
    		several vulnerabilities
    2006-05-20
    oval:com.redhat.rhsa:def:20050293
    P
    		RHSA-2005:293: kernel security update (Important)
    2005-05-13
    oval:com.redhat.rhsa:def:20040549
    P
    		RHSA-2004:549: kernel security update (Important)
    2004-12-02
    BACK
    linux linux kernel 2.4.0
    linux linux kernel 2.4.0 test1
    linux linux kernel 2.4.0 test10
    linux linux kernel 2.4.0 test11
    linux linux kernel 2.4.0 test12
    linux linux kernel 2.4.0 test2
    linux linux kernel 2.4.0 test3
    linux linux kernel 2.4.0 test4
    linux linux kernel 2.4.0 test5
    linux linux kernel 2.4.0 test6
    linux linux kernel 2.4.0 test7
    linux linux kernel 2.4.0 test8
    linux linux kernel 2.4.0 test9
    linux linux kernel 2.4.1
    linux linux kernel 2.4.2
    linux linux kernel 2.4.3
    linux linux kernel 2.4.4
    linux linux kernel 2.4.5
    linux linux kernel 2.4.6
    linux linux kernel 2.4.7
    linux linux kernel 2.4.8
    linux linux kernel 2.4.9
    linux linux kernel 2.4.10
    linux linux kernel 2.4.11
    linux linux kernel 2.4.12
    linux linux kernel 2.4.13
    linux linux kernel 2.4.14
    linux linux kernel 2.4.15
    linux linux kernel 2.4.16
    linux linux kernel 2.4.17
    linux linux kernel 2.4.18
    linux linux kernel 2.4.18
    linux linux kernel 2.4.18 pre1
    linux linux kernel 2.4.18 pre2
    linux linux kernel 2.4.18 pre3
    linux linux kernel 2.4.18 pre4
    linux linux kernel 2.4.18 pre5
    linux linux kernel 2.4.18 pre6
    linux linux kernel 2.4.18 pre7
    linux linux kernel 2.4.18 pre8
    linux linux kernel 2.4.19
    linux linux kernel 2.4.19 pre1
    linux linux kernel 2.4.19 pre2
    linux linux kernel 2.4.19 pre3
    linux linux kernel 2.4.19 pre4
    linux linux kernel 2.4.19 pre5
    linux linux kernel 2.4.19 pre6
    linux linux kernel 2.4.20
    linux linux kernel 2.4.21
    linux linux kernel 2.4.21 pre1
    linux linux kernel 2.4.21 pre4
    linux linux kernel 2.4.21 pre7
    linux linux kernel 2.4.22
    linux linux kernel 2.4.23
    linux linux kernel 2.4.23 pre9
    linux linux kernel 2.4.23_ow2
    linux linux kernel 2.4.24
    linux linux kernel 2.4.24_ow1
    linux linux kernel 2.4.25
    linux linux kernel 2.4.26
    linux linux kernel 2.4.27
    linux linux kernel 2.4.27 pre1
    linux linux kernel 2.4.27 pre2
    linux linux kernel 2.4.27 pre3
    linux linux kernel 2.4.27 pre4
    linux linux kernel 2.4.27 pre5
    linux linux kernel 2.6.0
    linux linux kernel 2.6.0 test1
    linux linux kernel 2.6.0 test10
    linux linux kernel 2.6.0 test11
    linux linux kernel 2.6.0 test2
    linux linux kernel 2.6.0 test3
    linux linux kernel 2.6.0 test4
    linux linux kernel 2.6.0 test5
    linux linux kernel 2.6.0 test6
    linux linux kernel 2.6.0 test7
    linux linux kernel 2.6.0 test8
    linux linux kernel 2.6.0 test9
    linux linux kernel 2.6.1
    linux linux kernel 2.6.1 rc1
    linux linux kernel 2.6.1 rc2
    linux linux kernel 2.6.2
    linux linux kernel 2.6.3
    linux linux kernel 2.6.4
    linux linux kernel 2.6.5
    linux linux kernel 2.6.6
    linux linux kernel 2.6.6 rc1
    linux linux kernel 2.6.7
    linux linux kernel 2.6.7 rc1
    linux linux kernel 2.6.8
    linux linux kernel 2.6.8 rc1
    linux linux kernel 2.6.8 rc2
    linux linux kernel 2.6.8 rc3
    linux linux kernel 2.6.9 2.6.20
    linux linux kernel 2.6_test9_cvs
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 3.0
    redhat enterprise linux 3.0
    redhat enterprise linux 3.0
    redhat enterprise linux desktop 3.0
    redhat fedora core core_2.0
    redhat fedora core core_3.0
    redhat linux advanced workstation 2.1
    redhat linux advanced workstation 2.1
    suse suse linux 1.0
    suse suse linux 8
    suse suse linux 8.1
    suse suse linux 8.2
    suse suse linux 9.0
    suse suse linux 9.0
    suse suse linux 9.0
    suse suse linux 9.1
    suse suse linux 9.2
    trustix secure linux 1.5
    trustix secure linux 2.0
    trustix secure linux 2.1
    trustix secure linux 2.2
    turbolinux turbolinux server 10.0