CVE-2005-0003

Published Apr 14, 2005

Last updated 4 months ago

Overview

Description
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.
Source
cve@mitre.org
NVD status
Modified
Products
mn100, network_routing, converged_communications_server, s8710, modular_messaging_message_storage_server, linux_kernel, mandrake_linux, mandrake_linux_corporate_server, enterprise_linux, enterprise_linux_desktop, intuity_audix, mandrake_multi_network_firewall, s8300, s8500, s8700

Risk scores

CVSS 2.0

Type
Primary
Base score
2.1
Impact score
2.9
Exploitability score
3.9
Vector string
AV:L/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.