CVE-2004-1117: High severity gentoo linux vulnerability

Published Dec 1, 2004

Updated

The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.

Affected Software

1 affected component

Gentoo Linux

Remediation

Patch Available

http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml

Event History

Dec 1, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1117?

CVE-2004-1117 is considered to have a high severity due to the potential for privilege escalation by local users.

How do I fix CVE-2004-1117?

To fix CVE-2004-1117, update your ChessBrain installation to a version later than 20407 that resolves this vulnerability.

Who is affected by CVE-2004-1117?

CVE-2004-1117 affects users of ChessBrain 20407 and earlier versions on Gentoo Linux.

What can an attacker do with CVE-2004-1117?

An attacker can gain root privileges on affected systems by modifying user-owned programs executed by the init scripts.

Is CVE-2004-1117 still relevant today?

While CVE-2004-1117 was reported nearly two decades ago, it highlights important security practices regarding privilege management that are still relevant.