CVE-2004-0482
Severity Score
4.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.
Múltiples errores de "comprobación incorrecta de límites" en ciertas funciones de procfs de OpenBSD 3.4 y 3.5 permite a usuarios locales leer memoria del kernel de su elección y posiblemente ganar privilegios mediante el sistema de archivos proc
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2004-05-18 CVE Reserved
- 2004-05-20 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (10)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=full-disclosure&m=108481812926420&w=2 | Mailing List | |
| http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2 | Mailing List | |
| http://secunia.com/advisories/11605 | Third Party Advisory | |
| http://www.deprotect.com/advisories/DEPROTECT-20041305.txt | Url Repurposed | |
| http://www.osvdb.org/6114 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16226 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch | 2024-02-14 | |
| ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch | 2024-02-14 |
| URL | Date | SRC |
|---|---|---|
| http://www.openbsd.org/errata34.html | 2024-02-14 | |
| http://www.openbsd.org/errata35.html | 2024-02-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 3.4 Search vendor "Openbsd" for product "Openbsd" and version "3.4" | - |
Affected
| ||||||
| Openbsd Search vendor "Openbsd" | Openbsd Search vendor "Openbsd" for product "Openbsd" | 3.5 Search vendor "Openbsd" for product "Openbsd" and version "3.5" | - |
Affected
| ||||||