Lucene search

[email protected]CVE-2004-0136

HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0136

2004-08-0604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0136

mapelf32exec

irix

denial of service

system crash

6.3 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a “corrupted binary.”

CPENameOperatorVersion
sgi:irixsgi irixeq6.5.23
sgi:irixsgi irixeq6.5.21f
sgi:irixsgi irixeq6.5.21m
sgi:irixsgi irixeq6.5.20m
sgi:irixsgi irixeq6.5.20f
sgi:irixsgi irixeq6.5.24
sgi:irixsgi irixeq6.5.22
sgi:irixsgi irixeq6.5.25

CPE	Name	Operator	Version
sgi:irix	sgi irix	eq	6.5.23
sgi:irix	sgi irix	eq	6.5.21f
sgi:irix	sgi irix	eq	6.5.21m
sgi:irix	sgi irix	eq	6.5.20m
sgi:irix	sgi irix	eq	6.5.20f
sgi:irix	sgi irix	eq	6.5.24
sgi:irix	sgi irix	eq	6.5.22
sgi:irix	sgi irix	eq	6.5.25

References

ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc

secunia.com/advisories/11872

www.osvdb.org/7123

www.securityfocus.com/bid/10547

exchange.xforce.ibmcloud.com/vulnerabilities/16416

6.3 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2004-0136

securityvulns1 nessus2 redhat2