CVE-2004-1073: Low severity SUSE SuSE Linux vulnerability
Published Dec 1, 2004
·Updated
The openexec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PTINTERP) functionality.
Affected Software
123 affected components
SUSE SuSE Linux=9.0
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.15
redhat Enterprise Linux=2.1
redhat Fedora Core=core_2.0
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.6.5
Linux Linux kernel=2.4.11
Linux Linux kernel=2.6.1
Trustix Secure Linux=2.0
SUSE SuSE Linux=9.2
redhat Enterprise Linux Desktop=3.0
SUSE SuSE Linux=9.0
Linux Linux kernel=2.4.27-pre3
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre5
redhat Linux Advanced Workstation=2.1
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.0-test6
SUSE SuSE Linux=8.2
Linux Linux kernel=2.4.19-pre1
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.27-pre2
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.6.0-test5
SUSE SuSE Linux=8
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.6.3
SUSE SuSE Linux=1.0
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.4.17
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6_test9_cvs
Linux Linux kernel=2.4.21-pre1
redhat Enterprise Linux=2.1
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.23_ow2
SUSE SuSE Linux=9.0
Linux Linux kernel=2.4.23
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.7
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.4.25
Linux Linux kernel=2.6.8
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.9
Linux Linux kernel=2.6.0-test1
Trustix Secure Linux=1.5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.27-pre5
Linux Linux kernel=2.4.14
redhat Linux Advanced Workstation=2.1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.4.27-pre1
SUSE SuSE Linux=9.1
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.18
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.4.19-pre5
redhat Enterprise Linux=3.0
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.5
redhat Enterprise Linux=2.1
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.4.18
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.4.27-pre4
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.4.3
redhat Enterprise Linux=2.1
Linux Linux kernel=2.4.1
Trustix Secure Linux=2.1
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.6.0-test7
Trustix Secure Linux=2.2
Linux Linux kernel=2.4.27
Linux Linux kernel=2.4.0-test11
redhat Fedora Core=core_3.0
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.4.0-test10
Turbolinux Turbolinux Server=10.0
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.4.18-pre7
SUSE SuSE Linux=8.1
redhat Enterprise Linux=2.1
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3
redhat Enterprise Linux=3.0
Remediation
Patch Available
Event History
Dec 1, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1073?
CVE-2004-1073 is considered a moderate severity vulnerability due to its ability to allow local users to read non-readable ELF binaries.
2
How do I fix CVE-2004-1073?
To mitigate CVE-2004-1073, you should upgrade the Linux kernel to a version higher than 2.4.27 or 2.6.8.
3
Who is affected by CVE-2004-1073?
CVE-2004-1073 affects local users on systems running the Linux kernel versions 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8.
4
What kind of systems are at risk from CVE-2004-1073?
Systems running affected versions of the Linux kernel, including various distributions like Red Hat, SUSE, and Trustix Secure Linux, are at risk from CVE-2004-1073.
5
Can CVE-2004-1073 lead to privilege escalation?
CVE-2004-1073 does not directly lead to privilege escalation but allows unauthorized reading of sensitive ELF binaries, which can compromise system integrity.