Detections
Analytics
Debian DSA-470-1 : linux-kernel-2.4.17-hppa - several vulnerabilities
high Nessus Plugin ID 15307
Synopsis
The remote Debian host is missing a security-related update.Description
Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the hppa kernel 2.4.17 for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update :- CAN-2003-0961 :
An integer overflow in brk() system call (do_brk() function) for Linux allows a local attacker to gain root privileges. Fixed upstream in Linux 2.4.23.
- CAN-2003-0985 :
Paul Starzetz discovered a flaw in bounds checking in mremap() in the Linux kernel (present in version 2.4.x and 2.6.x) which may allow a local attacker to gain root privileges. Version 2.2 is not affected by this bug.
Fixed upstream in Linux 2.4.24.
- CAN-2004-0077 :
Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap(2) system call. Due to missing function return value check of internal functions a local attacker can gain root privileges. Fixed upstream in Linux 2.4.25 and 2.6.3.
Solution
Upgrade the Linux kernel packages immediately.For the stable distribution (woody) these problems have been fixed in version 32.3 of kernel-image-2.4.17-hppa.
Vulnerability matrix for CAN-2004-0077
See Also
Plugin Details
Severity: High
ID: 15307
File Name: debian_DSA-470.nasl
Version: 1.30
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 9/29/2004
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:debian:debian_linux:3.0, p-cpe:/a:debian:debian_linux:kernel-image-2.4.17-hppa
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/1/2004
Reference Information
CVE: CVE-2003-0961, CVE-2003-0985, CVE-2004-0077
CERT: 981222
DSA: 470