CVE-2005-0003: Low severity Avaya Mn100 vulnerability
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0003?
CVE-2005-0003 is rated as high severity due to its potential to allow local users to crash the system or execute arbitrary code.
How do I fix CVE-2005-0003?
To address CVE-2005-0003, upgrade to Linux kernel version 2.6.10 or later, where the vulnerability has been patched.
What systems are affected by CVE-2005-0003?
CVE-2005-0003 affects various versions of the Linux kernel prior to 2.6.10 on 64-bit architectures, as well as specific Avaya products.
Can CVE-2005-0003 be exploited remotely?
CVE-2005-0003 cannot be exploited remotely as it requires local access to the system.
What type of attack does CVE-2005-0003 facilitate?
CVE-2005-0003 can facilitate a denial of service (system crash) or potentially arbitrary code execution through crafted ELF or a.out files.