CVE-2004-0109: CVE-2004-0109

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-0109

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Linux Kernel ISO9660文件系统缓冲区溢出漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux是一款开放源代码操作系统。 Linux内核没有对存储在ISO9660文件系统上的符号连接进行正确的长度检查，本地攻击者可以利用这个漏洞获得root用户权限。 ISO9660文件系统上的符号连接由'Rock Ridge'扩展到标准格式支持，通过在恶意构建ISO文件系统，当内核在执行目录列表及尝试通过畸形符号连接访问文件时触发。几个相关的受影响函数如下： fs/isofs/rock.c: rock_ridge_symlink_readpage() fs/isofs/rock.c: get_symli

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2004-0109

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2004-0109

Please Login to view more intelligence information

http://www.idefense.com/application/poi/display?id=101&type=vulnerabilitiesx_refsource_MISC
http://secunia.com/advisories/11469third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11429third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11373third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11486third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11361third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11626third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11464third-party-advisoryx_refsource_SECUNIA
http://www.ciac.org/ciac/bulletins/o-121.shtmlthird-party-advisorygovernment-resourcex_refsource_CIAC
http://secunia.com/advisories/11494third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/10141vdb-entryx_refsource_BID
http://secunia.com/advisories/11891third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11518third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/12003third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11861third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11986third-party-advisoryx_refsource_SECUNIA
http://www.ciac.org/ciac/bulletins/o-127.shtmlthird-party-advisorygovernment-resourcex_refsource_CIAC
http://secunia.com/advisories/11362third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/11470third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2004/dsa-479vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2004/dsa-495vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2004/dsa-491vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2004/dsa-489vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2004/dsa-481vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2004/dsa-482vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2004/dsa-480vendor-advisoryx_refsource_DEBIAN
http://marc.info/?l=bugtraq&m=108213675028441&w=2vendor-advisoryx_refsource_TRUSTIX
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846vendor-advisoryx_refsource_CONECTIVA
http://www.turbolinux.com/security/2004/TLSA-2004-14.txtvendor-advisoryx_refsource_TURBO
ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.ascvendor-advisoryx_refsource_SGI
http://www.redhat.com/support/errata/RHSA-2004-106.htmlvendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2004-105.htmlvendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2004-166.htmlvendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2004-183.htmlvendor-advisoryx_refsource_REDHAT
ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.ascvendor-advisoryx_refsource_SGI
http://security.gentoo.org/glsa/glsa-200407-02.xmlvendor-advisoryx_refsource_GENTOO
http://www.novell.com/linux/security/advisories/2004_09_kernel.htmlvendor-advisoryx_refsource_SUSE
http://www.linuxsecurity.com/advisories/engarde_advisory-4285.htmlvendor-advisoryx_refsource_ENGARDE
https://exchange.xforce.ibmcloud.com/vulnerabilities/15866vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733vdb-entrysignaturex_refsource_OVAL
https://nvd.nist.gov/vuln/detail/CVE-2004-0109

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2004-0109

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2004-0109

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2004-0109

III. Intelligence Information for CVE-2004-0109

IV. Related Vulnerabilities

V. Comments for CVE-2004-0109

Leave a comment