CVE-2004-0138
https://notcve.org/view.php?id=CVE-2004-0138
The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped. • http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25 http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 http://www.debian.org/security/2006/dsa-1067 http://www.debian.org/security/ •
CVE-2004-2607
https://notcve.org/view.php?id=CVE-2004-2607
A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer. • http://secunia.com/advisories/18977 http://secunia.com/advisories/19369 http://www.debian.org/security/2006/dsa-1018 http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 http://www.securityfocus.com/bid/16759 http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 •
CVE-2004-1144
https://notcve.org/view.php?id=CVE-2004-1144
Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges. • http://marc.info/?l=bugtraq&m=110376890429798&w=2 http://www.redhat.com/support/errata/RHSA-2004-689.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18686 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10439 https://access.redhat.com/security/cve/CVE-2004-1144 https://bugzilla.redhat.com/show_bug.cgi?id=1617379 •
CVE-2004-1234
https://notcve.org/view.php?id=CVE-2004-1234
load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL. • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142965 http://linux.bkbits.net:8080/linux-2.4/cset%404076466d_SqUm4azg4_v3FIG2-X6XQ http://secunia.com/advisories/20162 http://secunia.com/advisories/20163 http://secunia.com/advisories/20202 http://secunia.com/advisories/20338 http://www.debian.org/security/2006/dsa-1067 http://www.debian.org/security/2006/dsa-1069 http://www.debian.org/security/2006/dsa-1070 http://www.debian.org/security/2006/dsa-1082 http:/& •
CVE-2004-2731
https://notcve.org/view.php?id=CVE-2004-2731
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function. • http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html http://secunia.com/advisories/11981 http://secunia.com/advisories/29058 http://securitytracker.com/id?1010617 http://www.debian.org/security/2008/dsa-1503 http://www.osvdb.org/7345 http://www.osvdb.org/8363 http://www.securiteam.com/unixfocus/5GP0515DFW.html http://www.securityfocus.com/bid/10632 • CWE-189: Numeric Errors •