CVE-2005-0666
First published: Mon May 02 2005(Updated: )
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| The Pax Team Pax Linux | =2.4.23 | |
| The Pax Team Pax Linux | =2.2 | |
| The Pax Team Pax Linux | =2.4.27 | |
| The Pax Team Pax Linux | =2.4.25 | |
| The Pax Team Pax Linux | =2.6.5 | |
| The Pax Team Pax Linux | =2.4.28 | |
| The Pax Team Pax Linux | =2.4.24 | |
| The Pax Team Pax Linux | =2.4.20 | |
| The Pax Team Pax Linux | =2.4.22 | |
| The Pax Team Pax Linux | =2.4.21 | |
| The Pax Team Pax Linux | =2.4.26 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-0666?
CVE-2005-0666 is considered a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2005-0666?
To mitigate CVE-2005-0666, upgrade to a patched version of PaX that addresses this vulnerability.
Which versions of Pax Linux are affected by CVE-2005-0666?
CVE-2005-0666 affects PaX versions 2.2 through 2.4.28, prior to the fix released on 2005.03.05.
Can CVE-2005-0666 be exploited remotely?
Yes, CVE-2005-0666 can potentially be exploited by remote attackers to bypass access restrictions.
Who is impacted by CVE-2005-0666?
Local users as well as remote attackers can be impacted by CVE-2005-0666 due to its nature of allowing arbitrary code execution.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/description
- agent/tags
- agent/event
- agent/source
- vendor/the pax team
- canonical/the pax team pax linux
- version/the pax team pax linux/2.4.23
- version/the pax team pax linux/2.2
- version/the pax team pax linux/2.4.27
- version/the pax team pax linux/2.4.25
- version/the pax team pax linux/2.6.5
- version/the pax team pax linux/2.4.28
- version/the pax team pax linux/2.4.24
- version/the pax team pax linux/2.4.20
- version/the pax team pax linux/2.4.22
- version/the pax team pax linux/2.4.21
- version/the pax team pax linux/2.4.26