CVE-2004-0415

Description

Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.

Affected products

• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.0 – 2.4.0
• Linux / Linux kernel2.4.1 – 2.4.1
• Linux / Linux kernel2.4.2 – 2.4.2
• Linux / Linux kernel2.4.3 – 2.4.3
• Linux / Linux kernel2.4.4 – 2.4.4
• Linux / Linux kernel2.4.5 – 2.4.5
• Linux / Linux kernel2.4.6 – 2.4.6
• Linux / Linux kernel2.4.7 – 2.4.7
• Linux / Linux kernel2.4.8 – 2.4.8
• Linux / Linux kernel2.4.9 – 2.4.9
• Linux / Linux kernel2.4.10 – 2.4.10
• Linux / Linux kernel2.4.11 – 2.4.11
• Linux / Linux kernel2.4.12 – 2.4.12
• Linux / Linux kernel2.4.13 – 2.4.13
• Linux / Linux kernel2.4.14 – 2.4.14
• Linux / Linux kernel2.4.15 – 2.4.15
• Linux / Linux kernel2.4.16 – 2.4.16
• Linux / Linux kernel2.4.17 – 2.4.17
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.18 – 2.4.18
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.19 – 2.4.19
• Linux / Linux kernel2.4.20 – 2.4.20
• Linux / Linux kernel2.4.21 – 2.4.21
• Linux / Linux kernel2.4.21 – 2.4.21
• Linux / Linux kernel2.4.21 – 2.4.21
• Linux / Linux kernel2.4.21 – 2.4.21
• Linux / Linux kernel2.4.22 – 2.4.22
• Linux / Linux kernel2.4.23 – 2.4.23
• Linux / Linux kernel2.4.23 – 2.4.23
• Linux / Linux kernel2.4.23_ow2 – 2.4.23_ow2
• Linux / Linux kernel2.4.24 – 2.4.24
• Linux / Linux kernel2.4.24_ow1 – 2.4.24_ow1
• Linux / Linux kernel2.4.25 – 2.4.25
• Linux / Linux kernel2.4.26 – 2.4.26
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.0 – 2.6.0
• Linux / Linux kernel2.6.1 – 2.6.1
• Linux / Linux kernel2.6.1 – 2.6.1
• Linux / Linux kernel2.6.1 – 2.6.1
• Linux / Linux kernel2.6.2 – 2.6.2
• Linux / Linux kernel2.6.3 – 2.6.3
• Linux / Linux kernel2.6.4 – 2.6.4
• Linux / Linux kernel2.6.5 – 2.6.5
• Linux / Linux kernel2.6.6 – 2.6.6
• Linux / Linux kernel2.6.6 – 2.6.6
• Linux / Linux kernel2.6.7 – 2.6.7
• Linux / Linux kernel2.6.7 – 2.6.7
• Linux / Linux kernel2.6_test9_cvs – 2.6_test9_cvs
• RedHat / fedora_corecore_1.0 – core_1.0
• trustix / secure_linux2.0 – 2.0
• trustix / secure_linux2.1 – 2.1

Exploits & proofs of concept

• exploit-dbLinux Kernel 2.4.26 - File Offset Pointer Handling Memory Disclosureby Paul Starzetz

References

• MISChttp://www.redhat.com/support/errata/RHSA-2004-413.html
• MISChttp://www.redhat.com/support/errata/RHSA-2004-418.html
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200408-24.xml
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965
• MISChttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/16877
• VENDOR_ADVISORYhttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc