CVE-2004-0587
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SuSE是一款开放源代码Linux系统。 SuSE Linux kernel由于对'/proc/scsi/qla2300/HbaApiNode'文件权限设置不正确，本地攻击者可以利用这个漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2004-0587
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SuSE Linux Kernel HbaApiNode不安全文件权限本地拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SuSE是一款开放源代码Linux系统。 SuSE Linux kernel由于对'/proc/scsi/qla2300/HbaApiNode'文件权限设置不正确，本地攻击者可以利用这个漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2004-0587
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-0587
请登录查看更多情报信息。
Vendor Advisories for CVE-2004-0587 (5)
-
-
-
-
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9398 vdb-entry signature x_refsource_OVAL
Other References for CVE-2004-0587 (5)
-
-
-
ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc vendor-advisory x_refsource_SGI
-
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066 vendor-advisory x_refsource_MANDRAKE
-
http://www.novell.com/linux/security/advisories/2004_10_kernel.html vendor-advisory x_refsource_SUSE
Same Patch Batch · n/a · 2004-06-23 · 17 CVEs total
| CVE-2004-0125 | FreeBSD jail()进程未授权路由表修改漏洞 | |
| CVE-2004-0135 | SGI IRIX SYSSGI()系统调用非特权用户内核内存访问漏洞 | |
| CVE-2004-0136 | SGI IRIX MapElf32Exec未明本地拒绝服务漏洞 | |
| CVE-2004-0137 | SGI IRIX Init未明本地拒绝服务漏洞 | |
| CVE-2004-0413 | Subversion SVN协议解析远程整数溢出漏洞 | |
| CVE-2004-0492 | Apache 安全漏洞 | |
| CVE-2004-0495 | Linux Kernel多个设备驱动漏洞 | |
| CVE-2004-0579 | 超级本地格式串漏洞Super本地格式字符串漏洞 | |
| CVE-2004-0580 | 多种Linksys设备DHCP信息泄露和拒绝服务漏洞 | |
| CVE-2004-0581 | KSymoops KSymoops-GZNM处理不安全的临时文件符号链接漏洞 | |
| CVE-2004-0582 | Webmin多个未明安全漏洞 | |
| CVE-2004-0583 | Webmin多个未明安全漏洞 | |
| CVE-2004-0584 | Horde IMP Email Header HTML注入漏洞 | |
| CVE-2004-0586 | acpRunner ActiveX 代码存在威胁 acpRunner ActiveX执行任意代码漏洞 | |
| CVE-2004-0588 | Usermin HTML Email脚本代码执行漏洞 | |
| CVE-2004-0589 | Cisco IOS 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2004-0587
No comments yet