CVE-2004-1337

5 documents5 sources
Severity
7.2HIGH
EPSS
0.0%
top 85.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Conectiva LinuxGNU Realtime Linux Security ModuleUbuntu Ubuntu Linux
Timeline
PublishedDec 23
Latest updateApr 29

Description

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDconectiva/linux10.0

Also affects: Ubuntu Linux 4.1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q8ph-984x-fqwc: The POSIX Capability Linux Security Module (LSM) for Linux kernel 2↗2022-04-29
▶
CVEList
CVE-2004-1337: The POSIX Capability Linux Security Module (LSM) for Linux kernel 2↗2005-01-06
▶

💥Exploits & PoCs

1
Exploit-DB
Protector System 1.15 b1 - 'index.php' SQL Injection↗2004-04-23
▶

📋Vendor Advisories

1
Ubuntu
Linux kernel vulnerabilities↗2005-01-09
▶
CVE-2004-1337 (HIGH CVSS 7.2) | The POSIX Capability Linux Security | cvebase.io