CVE-2004-1058: Race Condition
Published Dec 22, 2004
·Updated
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
Affected Software
32 affected components
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.1
Ubuntu Ubuntu Linux=4.1
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6_test9_cvs
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.0-test7
Ubuntu Ubuntu Linux=4.1
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3
Remediation
Patch Available
Event History
Dec 22, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1058?
CVE-2004-1058 is considered to have medium severity due to its potential for local user exploitation.
2
How do I fix CVE-2004-1058?
To fix CVE-2004-1058, you should upgrade your Linux kernel to a version later than 2.6.8 that addresses this race condition.
3
Who is affected by CVE-2004-1058?
Local users on systems running specific versions of the Linux kernel 2.6 are affected by CVE-2004-1058.
4
What systems are impacted by CVE-2004-1058?
CVE-2004-1058 affects systems running Linux kernel versions 2.6.0 up to and including 2.6.8.
5
What does CVE-2004-1058 exploit?
CVE-2004-1058 exploits a race condition allowing local users to read environment variables of another process during its spawning.