CVE-2004-0834: High severity Mandrakesoft Mandrake Multi Network Firewall vulnerability
Published Oct 20, 2004
·Updated
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modemrun, (2) pppoa2, or (3) pppoa3.
Affected Software
22 affected components
Mandrakesoft Mandrake Multi Network Firewall=8.2
Speedtouch Speedtouch USB driver=1.0
Speedtouch Speedtouch USB driver=1.1
Speedtouch Speedtouch USB driver=1.2
Speedtouch Speedtouch USB driver=1.2_beta1
Speedtouch Speedtouch USB driver=1.2_beta2
Speedtouch Speedtouch USB driver=1.2_beta3
Speedtouch Speedtouch USB driver=1.3
Gentoo Linux=1.4
Mandrakesoft Mandrake Linux=8.2
Mandrakesoft Mandrake Linux=8.2
Mandrakesoft Mandrake Linux=9.0
Mandrakesoft Mandrake Linux=9.1
Mandrakesoft Mandrake Linux=9.1
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
Event History
Oct 20, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0834?
CVE-2004-0834 is classified as a critical vulnerability due to its potential to allow local users to execute arbitrary code.
2
How do I fix CVE-2004-0834?
To fix CVE-2004-0834, you should upgrade the Speedtouch USB driver to version 1.3 or later.
3
Which software is affected by CVE-2004-0834?
CVE-2004-0834 affects the Speedtouch USB driver versions 1.0 to 1.2 and specific Mandrake Linux distributions.
4
Who is vulnerable to CVE-2004-0834?
Local users with access to systems running the vulnerable versions of the Speedtouch USB driver are at risk due to CVE-2004-0834.
5
What actions can be taken to mitigate CVE-2004-0834?
In addition to upgrading the driver, ensure that system access is restricted to trusted users to mitigate CVE-2004-0834.