CVE-2004-1058

Severity Score

1.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.

Condición de carrera en el kernel de Linux 2.6 permite a usurios locales leer las variables de entorno de otros proceso que se está engendrando todavía mediante /proc/.../cmdline.

*Credits: N/A

CVSS Scores

NISTv2 1.2

Attack Vector

Local

Attack Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-11-23 CVE Reserved
2004-12-22 CVE Published
2023-03-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (21)

URL	Tag	Source
http://secunia.com/advisories/18684	Third Party Advisory
http://secunia.com/advisories/19038	Third Party Advisory
http://secunia.com/advisories/19369	Third Party Advisory
http://secunia.com/advisories/19607	Third Party Advisory
http://secunia.com/advisories/21476	Third Party Advisory
http://www.securityfocus.com/bid/11052	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17151	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10427	Signature

URL	Date	SRC

URL	Date	SRC
http://www.securityfocus.com/bid/11937	2018-10-03

URL	Date	SRC
ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U	2018-10-03
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html	2018-10-03
http://www.debian.org/security/2006/dsa-1018	2018-10-03
http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml	2018-10-03
http://www.mandriva.com/security/advisories?name=MDKSA-2005:022	2018-10-03
http://www.redhat.com/support/errata/RHSA-2005-293.html	2018-10-03
http://www.redhat.com/support/errata/RHSA-2006-0190.html	2018-10-03
http://www.redhat.com/support/errata/RHSA-2006-0191.html	2018-10-03
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532	2018-10-03
https://usn.ubuntu.com/38-1	2018-10-03
https://access.redhat.com/security/cve/CVE-2004-1058	2006-02-01
https://bugzilla.redhat.com/show_bug.cgi?id=1617360	2006-02-01

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test10		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test11		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test8		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		test9		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.1"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.1"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.6"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.7"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.8"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.8"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.8"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.9 Search vendor "Linux" for product "Linux Kernel" and version "2.6.9"		2.6.20		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.10"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6_test9_cvs Search vendor "Linux" for product "Linux Kernel" and version "2.6_test9_cvs"		-		Affected
Ubuntu Search vendor "Ubuntu"		Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux"				4.1 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "4.1"		ia64		Affected
Ubuntu Search vendor "Ubuntu"		Ubuntu Linux Search vendor "Ubuntu" for product "Ubuntu Linux"				4.1 Search vendor "Ubuntu" for product "Ubuntu Linux" and version "4.1"		ppc		Affected