CVE-2004-2312: Buffer Overflow
Published Dec 31, 2004
·Updated
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.
Affected Software
1 affected component
IBM AIX=4.3.3
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2312?
CVE-2004-2312 is classified as a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
2
How do I fix CVE-2004-2312?
To fix CVE-2004-2312, remove the setgid bit from the GNU make binary or upgrade to a version not affected by the vulnerability.
3
What systems are affected by CVE-2004-2312?
CVE-2004-2312 specifically affects GNU make when installed setgid on IBM AIX version 4.3.3.
4
Who can exploit CVE-2004-2312?
CVE-2004-2312 can be exploited by local users who have access to the vulnerable system.
5
What are the implications of CVE-2004-2312?
The implications of CVE-2004-2312 include unauthorized privilege escalation, allowing malicious local users to execute commands with higher privileges.