medium
6.2
CWE
NVD-CWE-Other 362
Advisory Published
Updated

CVE-2004-1235: Race Condition

First published: Thu Jan 20 2005(Updated: )

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Avaya MN100
Avaya Network Routing
avaya converged communications server=2.0
Avaya S8710=r2.0.0
Avaya S8710=r2.0.1
Avaya Modular Messaging Message Storage Server=1.1
Avaya Modular Messaging Message Storage Server=2.0
Linux Kernel=2.4.0
Linux Kernel=2.4.0-test1
Linux Kernel=2.4.0-test10
Linux Kernel=2.4.0-test11
Linux Kernel=2.4.0-test12
Linux Kernel=2.4.0-test2
Linux Kernel=2.4.0-test3
Linux Kernel=2.4.0-test4
Linux Kernel=2.4.0-test5
Linux Kernel=2.4.0-test6
Linux Kernel=2.4.0-test7
Linux Kernel=2.4.0-test8
Linux Kernel=2.4.0-test9
Linux Kernel=2.4.1
Linux Kernel=2.4.2
Linux Kernel=2.4.3
Linux Kernel=2.4.4
Linux Kernel=2.4.5
Linux Kernel=2.4.6
Linux Kernel=2.4.7
Linux Kernel=2.4.8
Linux Kernel=2.4.9
Linux Kernel=2.4.10
Linux Kernel=2.4.11
Linux Kernel=2.4.12
Linux Kernel=2.4.13
Linux Kernel=2.4.14
Linux Kernel=2.4.15
Linux Kernel=2.4.16
Linux Kernel=2.4.17
Linux Kernel=2.4.18
Linux Kernel=2.4.18
Linux Kernel=2.4.18-pre1
Linux Kernel=2.4.18-pre2
Linux Kernel=2.4.18-pre3
Linux Kernel=2.4.18-pre4
Linux Kernel=2.4.18-pre5
Linux Kernel=2.4.18-pre6
Linux Kernel=2.4.18-pre7
Linux Kernel=2.4.18-pre8
Linux Kernel=2.4.19
Linux Kernel=2.4.19-pre1
Linux Kernel=2.4.19-pre2
Linux Kernel=2.4.19-pre3
Linux Kernel=2.4.19-pre4
Linux Kernel=2.4.19-pre5
Linux Kernel=2.4.19-pre6
Linux Kernel=2.4.20
Linux Kernel=2.4.21
Linux Kernel=2.4.21-pre1
Linux Kernel=2.4.21-pre4
Linux Kernel=2.4.21-pre7
Linux Kernel=2.4.22
Linux Kernel=2.4.23
Linux Kernel=2.4.23-pre9
Linux Kernel=2.4.23_ow2
Linux Kernel=2.4.24
Linux Kernel=2.4.24_ow1
Linux Kernel=2.4.25
Linux Kernel=2.4.26
Linux Kernel=2.4.27
Linux Kernel=2.4.27-pre1
Linux Kernel=2.4.27-pre2
Linux Kernel=2.4.27-pre3
Linux Kernel=2.4.27-pre4
Linux Kernel=2.4.27-pre5
Linux Kernel=2.4.28
Linux Kernel=2.4.29-rc2
Linux Kernel=2.6.0
Linux Kernel=2.6.0-test1
Linux Kernel=2.6.0-test10
Linux Kernel=2.6.0-test11
Linux Kernel=2.6.0-test2
Linux Kernel=2.6.0-test3
Linux Kernel=2.6.0-test4
Linux Kernel=2.6.0-test5
Linux Kernel=2.6.0-test6
Linux Kernel=2.6.0-test7
Linux Kernel=2.6.0-test8
Linux Kernel=2.6.0-test9
Linux Kernel=2.6.1
Linux Kernel=2.6.1-rc1
Linux Kernel=2.6.1-rc2
Linux Kernel=2.6.2
Linux Kernel=2.6.3
Linux Kernel=2.6.4
Linux Kernel=2.6.5
Linux Kernel=2.6.6
Linux Kernel=2.6.6-rc1
Linux Kernel=2.6.7
Linux Kernel=2.6.7-rc1
Linux Kernel=2.6.8
Linux Kernel=2.6.8-rc1
Linux Kernel=2.6.8-rc2
Linux Kernel=2.6.8-rc3
Linux Kernel=2.6.9-2.6.20
Linux Kernel=2.6.10
Linux Kernel=2.6.10-rc2
Linux Kernel=2.6_test9_cvs
Mandrake Linux=9.2
Mandrake Linux=9.2
Mandrake Linux=10.0
Mandrake Linux=10.0
Mandrake Linux=10.1
Mandrake Linux=10.1
Mandriva Linux Corporate Server=2.1
Mandriva Linux Corporate Server=2.1
Mandriva Linux Corporate Server=3.0
Red Hat Enterprise Linux=3.0
Red Hat Enterprise Linux=3.0
Red Hat Enterprise Linux=3.0
Red Hat Enterprise Linux=4.0
Red Hat Enterprise Linux=4.0
Red Hat Enterprise Linux=4.0
redhat enterprise Linux desktop=3.0
redhat enterprise Linux desktop=4.0
Red Hat Fedora Core=core_1.0
Red Hat Fedora Core=core_2.0
Red Hat Fedora Core=core_3.0
Red Hat Linux=7.3
Red Hat Linux=9.0
SUSE Linux=1.0
SUSE Linux=8
SUSE Linux=8.1
SUSE Linux=8.2
SUSE Linux=9.0
SUSE Linux=9.0
SUSE Linux=9.1
SUSE Linux=9.2
Ubuntu=4.1
Ubuntu=4.1
Avaya Intuity Audix
Mandrakesoft Mandrake Multi Network Firewall=8.2
Avaya S8300=r2.0.0
Avaya S8300=r2.0.1
Avaya S8500=r2.0.0
Avaya S8500=r2.0.1
avaya s8700=r2.0.0
avaya s8700=r2.0.1
Conectiva Linux=10.0

Remedy

http://www.redhat.com/support/errata/RHSA-2005-043.html

Remedy

http://www.securityfocus.com/bid/12190

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2004-1235?

    CVE-2004-1235 has a high severity rating due to the potential for local users to execute arbitrary code.

  • How do I fix CVE-2004-1235?

    To fix CVE-2004-1235, update the Linux kernel to a version greater than 2.6.10 or apply available patches.

  • Which systems are affected by CVE-2004-1235?

    CVE-2004-1235 affects Linux kernel versions 2.4 up to 2.6.10, along with some specific software from Avaya and other vendors.

  • What type of vulnerability is CVE-2004-1235?

    CVE-2004-1235 is a race condition vulnerability found in the uselib system call in the Linux kernel.

  • Can CVE-2004-1235 be exploited remotely?

    CVE-2004-1235 cannot be exploited remotely as it requires local access to the affected system.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203