CVE-2004-0109

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

🔗 References (84)

• cve@mitreftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc
• cve@mitreftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
• cve@mitrehttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
• cve@mitrehttp://marc.info/?l=bugtraq&m=108213675028441&w=2
• cve@mitrehttp://rhn.redhat.com/errata/RHSA-2004-166.html
• cve@mitrehttp://secunia.com/advisories/11361
• cve@mitrehttp://secunia.com/advisories/11362
• cve@mitrehttp://secunia.com/advisories/11373
• cve@mitrehttp://secunia.com/advisories/11429
• cve@mitrehttp://secunia.com/advisories/11464
• cve@mitrehttp://secunia.com/advisories/11469
• cve@mitrehttp://secunia.com/advisories/11470
• cve@mitrehttp://secunia.com/advisories/11486
• cve@mitrehttp://secunia.com/advisories/11494
• cve@mitrehttp://secunia.com/advisories/11518