SB2004060101 - Memory corruption in Linux kernel



SB2004060101 - Memory corruption in Linux kernel

Published: June 1, 2004

Security Bulletin ID SB2004060101
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Memory corruption (CVE-ID: CVE-2004-0109)

The vulnerability allows a local user to read and manipulate data.

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.


Remediation

Install update from vendor's website.

References