CVE-2004-1235: Race Condition
Published Jan 20, 2005
·Updated
Race condition in the (1) loadelflibrary and (2) binfmtaout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Affected Software
147 affected components
Avaya Mn100
Avaya Network Routing
Avaya Converged Communications Server=2.0
Avaya S8710=r2.0.0
Avaya S8710=r2.0.1
Avaya Modular Messaging Message Storage Server=1.1
Avaya Modular Messaging Message Storage Server=2.0
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.3
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.5
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.7
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.9
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.11
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.14
Linux Linux kernel=2.4.15
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.17
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.18-pre7
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.4.19-pre5
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.21-pre1
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.23
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.23_ow2
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.25
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.27
Linux Linux kernel=2.4.27-pre1
Linux Linux kernel=2.4.27-pre2
Linux Linux kernel=2.4.27-pre3
Linux Linux kernel=2.4.27-pre4
Linux Linux kernel=2.4.27-pre5
Linux Linux kernel=2.4.28
Linux Linux kernel=2.4.29-rc2
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6_test9_cvs
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux Corporate Server=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux=4.0
redhat Enterprise Linux=4.0
redhat Enterprise Linux=4.0
redhat Enterprise Linux Desktop=3.0
redhat Enterprise Linux Desktop=4.0
redhat Fedora Core=core_1.0
redhat Fedora Core=core_2.0
redhat Fedora Core=core_3.0
redhat Linux=7.3
redhat Linux=9.0
SUSE SuSE Linux=1.0
SUSE SuSE Linux=8
SUSE SuSE Linux=8.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.2
Ubuntu Ubuntu Linux=4.1
Ubuntu Ubuntu Linux=4.1
Avaya Intuity Audix
Mandrakesoft Mandrake Multi Network Firewall=8.2
Avaya S8300=r2.0.0
Avaya S8300=r2.0.1
Avaya S8500=r2.0.0
Avaya S8500=r2.0.1
Avaya S8700=r2.0.0
Avaya S8700=r2.0.1
Conectiva Linux=10.0
Remediation
Patch Available
Patch Available
Event History
Jan 20, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1235?
CVE-2004-1235 has a high severity rating due to the potential for local users to execute arbitrary code.
2
How do I fix CVE-2004-1235?
To fix CVE-2004-1235, update the Linux kernel to a version greater than 2.6.10 or apply available patches.
3
Which systems are affected by CVE-2004-1235?
CVE-2004-1235 affects Linux kernel versions 2.4 up to 2.6.10, along with some specific software from Avaya and other vendors.
4
What type of vulnerability is CVE-2004-1235?
CVE-2004-1235 is a race condition vulnerability found in the uselib system call in the Linux kernel.
5
Can CVE-2004-1235 be exploited remotely?
CVE-2004-1235 cannot be exploited remotely as it requires local access to the affected system.