Vulnerability CVE-2004-1151

Vulnerability Name:

CVE-2004-1151 (CCN-18403)

Assigned:

2004-11-30

Published:

2004-11-30

Updated:

2016-10-18

Summary:

Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.

CVSS v3 Severity:

9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-Other

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2004-1151

Source: CCN
Type: BITKEEPER Web site
Changeset details for 1.2079

Source: MISC
Type: UNKNOWN
http://linux.bkbits.net:8080/linux-2.6/cset@1.2079

Source: CCN
Type: Changeset, 2004/12/01 17:08:01-08:00
[PATCH] Buffer overrun in arch/x86_64/sys_ia32.c:sys32_ni_syscall()

Source: MISC
Type: UNKNOWN
http://linux.bkbits.net:8080/linux-2.6/gnupatch@41ae6af1cR3mJYlW6D8EHxCKSxuJiQ

Source: BUGTRAQ
Type: UNKNOWN
20041214 [USN-38-1] Linux kernel vulnerabilities

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2005:022

Source: SUSE
Type: UNKNOWN
SUSE-SA:2004:044

Source: CCN
Type: BID-11938
Linux Kernel Sys32_NI_Syscall/Sys32_VM86_Warning Local Buffer Overflow Vulnerability

Source: CCN
Type: TLSA-2005-29
Multiple vulnerabilities exist in the Linux kernel

Source: CCN
Type: USN-38-1
Linux kernel vulnerabilities

Source: CCN
Type: Unix Systems Support Group, Tue Nov 30 2004 - 03:49:23 EST
Buffer overrun in arch/x86_64/sys_ia32.c:sys32_ni_syscall()

Source: MLIST
Type: UNKNOWN
[linux-kernel] 20041130 Buffer overrun in arch/x86_64/sys_ia32.c:sys32_ni_syscall()

Source: XF
Type: UNKNOWN
linux-sys32nisyscall-bo(18403)

Source: SUSE
Type: SUSE-SA:2004:044
kernel: various kernel problems

Vulnerable Configuration:

Configuration 1:

cpe:/o:linux:linux_kernel:2.6.0:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.1:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.2:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.3:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.4:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.5:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.6:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.7:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*

OR cpe:/o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*

OR cpe:/o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*

Denotes that component is vulnerable

Vulnerability Name:

CVE-2004-1151 (CCN-18404)

Assigned:

2004-11-30

Published:

2004-11-30

Updated:

2004-11-30

Summary:

Linux is vulnerable to a buffer overflow in the sys32_vm86_warning function in the sys_ia32.c file. A local attacker could exploit this vulnerability to overflow a buffer and possibly execute arbitrary code on the system or cause a denial of service.

CVSS v3 Severity:

5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial