阿里云漏洞库

CVE编号

CVE-2004-1235

利用情况

暂无

补丁情况

N/A

披露时间

2005-04-14

（1）load_elf_library和（2）binfmt_aout函数中的争用条件要求 Linux kernel 2.4 through 2.429-rc2 和 2.6 through 2.6.10中的uselib允许本地用户通过操纵VMA描述符来执行任意代码。

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
http://isec.pl/vulnerabilities/isec-0021-uselib.txt
http://marc.info/?l=bugtraq&m=110512575901427&w=2
http://secunia.com/advisories/20162
http://secunia.com/advisories/20163
http://secunia.com/advisories/20202
http://secunia.com/advisories/20338
http://www.debian.org/security/2006/dsa-1067
http://www.debian.org/security/2006/dsa-1069
http://www.debian.org/security/2006/dsa-1070
http://www.debian.org/security/2006/dsa-1082
http://www.mandriva.com/security/advisories?name=MDKSA-2005:022
http://www.novell.com/linux/security/advisories/2005_01_sr.html
http://www.redhat.com/support/errata/RHSA-2005-016.html
http://www.redhat.com/support/errata/RHSA-2005-017.html
http://www.redhat.com/support/errata/RHSA-2005-043.html
http://www.redhat.com/support/errata/RHSA-2005-092.html
http://www.securityfocus.com/advisories/7804
http://www.securityfocus.com/advisories/7805
http://www.securityfocus.com/advisories/7806
http://www.securityfocus.com/bid/12190
http://www.trustix.org/errata/2005/0001/
https://bugzilla.fedora.us/show_bug.cgi?id=2336
https://exchange.xforce.ibmcloud.com/vulnerabilities/18800
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	avaya	intuity_audix	*	-
	运行在以下环境
	应用	avaya	mn100	*	-
	运行在以下环境
	应用	avaya	network_routing	*	-
	运行在以下环境
	应用	mandrakesoft	mandrake_multi_network_firewall	8.2	-

CWE-ID	漏洞类型
NVD-CWE-Other