CVE-2004-0415: Low severity Linux Linux kernel vulnerability
Published Aug 5, 2004
·Updated
Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.
Affected Software
87 affected components
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.15
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.6.5
Linux Linux kernel=2.4.11
Linux Linux kernel=2.6.1
Trustix Secure Linux=2.0
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.4.17
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6_test9_cvs
Linux Linux kernel=2.4.21-pre1
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.23_ow2
Linux Linux kernel=2.4.23
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.0-test11
redhat Fedora Core=core_1.0
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.7
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.4.25
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.9
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.14
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.18
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.4.19-pre5
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.5
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.4.18
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.4.3
Linux Linux kernel=2.4.1
Trustix Secure Linux=2.1
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.4.18-pre7
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3
Remediation
Patch Available
Event History
Aug 5, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0415?
CVE-2004-0415 is considered to be of high severity due to its potential for local users to access kernel memory, which can lead to privilege escalation.
2
How do I fix CVE-2004-0415?
To fix CVE-2004-0415, users should upgrade to a fixed version of the Linux kernel as recommended by their distribution's security advisory.
3
What versions of the Linux kernel are affected by CVE-2004-0415?
CVE-2004-0415 affects various versions of the Linux kernel starting from 2.4.0 up to 2.4.26.
4
Can CVE-2004-0415 be exploited remotely?
CVE-2004-0415 requires local access to the system for exploitation, making it less likely to be exploited remotely.
5
What type of vulnerability is identified in CVE-2004-0415?
CVE-2004-0415 is classified as a local privilege escalation vulnerability in the Linux kernel.