CVE-2004-0109

N/A Unknown
Published: June 01, 2004 Modified: April 16, 2026
View on NVD

Description

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc
Source: cve@mitre.org
Patch Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
Source: cve@mitre.org
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
Source: cve@mitre.org
http://marc.info/?l=bugtraq&m=108213675028441&w=2
Source: cve@mitre.org
http://rhn.redhat.com/errata/RHSA-2004-166.html
Source: cve@mitre.org
Patch Vendor Advisory
http://secunia.com/advisories/11361
Source: cve@mitre.org
http://secunia.com/advisories/11362
Source: cve@mitre.org
http://secunia.com/advisories/11373
Source: cve@mitre.org
http://secunia.com/advisories/11429
Source: cve@mitre.org
http://secunia.com/advisories/11464
Source: cve@mitre.org
http://secunia.com/advisories/11469
Source: cve@mitre.org
http://secunia.com/advisories/11470
Source: cve@mitre.org
http://secunia.com/advisories/11486
Source: cve@mitre.org
http://secunia.com/advisories/11494
Source: cve@mitre.org
http://secunia.com/advisories/11518
Source: cve@mitre.org
http://secunia.com/advisories/11626
Source: cve@mitre.org
http://secunia.com/advisories/11861
Source: cve@mitre.org
http://secunia.com/advisories/11891
Source: cve@mitre.org
http://secunia.com/advisories/11986
Source: cve@mitre.org
http://secunia.com/advisories/12003
Source: cve@mitre.org
http://security.gentoo.org/glsa/glsa-200407-02.xml
Source: cve@mitre.org
http://www.ciac.org/ciac/bulletins/o-121.shtml
Source: cve@mitre.org
http://www.ciac.org/ciac/bulletins/o-127.shtml
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-479
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-480
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-481
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-482
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-489
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-491
Source: cve@mitre.org
http://www.debian.org/security/2004/dsa-495
Source: cve@mitre.org
http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities
Source: cve@mitre.org
Vendor Advisory
http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
Source: cve@mitre.org
Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:029
Source: cve@mitre.org
http://www.novell.com/linux/security/advisories/2004_09_kernel.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2004-105.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2004-106.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2004-183.html
Source: cve@mitre.org
http://www.securityfocus.com/bid/10141
Source: cve@mitre.org
http://www.turbolinux.com/security/2004/TLSA-2004-14.txt
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/15866
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940
Source: cve@mitre.org
ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
Source: af854a3a-2127-422b-91ae-364da2661108
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=108213675028441&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://rhn.redhat.com/errata/RHSA-2004-166.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://secunia.com/advisories/11361
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11362
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11373
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11429
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11464
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11469
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11470
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11486
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11494
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11518
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11626
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11861
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11891
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/11986
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/12003
Source: af854a3a-2127-422b-91ae-364da2661108
http://security.gentoo.org/glsa/glsa-200407-02.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ciac.org/ciac/bulletins/o-121.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ciac.org/ciac/bulletins/o-127.shtml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-479
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-480
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-481
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-482
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-489
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-491
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2004/dsa-495
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:029
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.novell.com/linux/security/advisories/2004_09_kernel.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2004-105.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2004-106.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2004-183.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/10141
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.turbolinux.com/security/2004/TLSA-2004-14.txt
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/15866
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940
Source: af854a3a-2127-422b-91ae-364da2661108

84 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.3%
49th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

linux