CVE-2004-0497

2004-12-0605:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0497

linux kernel

vulnerability

local users

group id

files

nfs exported files

5.8 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

0.4%

JSON

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

CPENameOperatorVersion
conectiva:linuxconectiva linuxeq10
mandrakesoft:mandrake_multi_network_firewallmandrakesoft mandrake multi network firewalleq8.2
trustix:secure_linuxtrustix secure linuxeq2.0
mandrakesoft:mandrake_linux_corporate_servermandrakesoft mandrake linux corporate servereq2.1
suse:suse_linuxsuse suse linuxeq9.0
suse:suse_linuxsuse suse linuxeq8.2
redhat:enterprise_linuxredhat enterprise linuxeq3.0
redhat:enterprise_linuxredhat enterprise linuxeq2.1
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq9.2
suse:suse_linuxsuse suse linuxeq8.0

CPE	Name	Operator	Version
conectiva:linux	conectiva linux	eq	10
mandrakesoft:mandrake_multi_network_firewall	mandrakesoft mandrake multi network firewall	eq	8.2
trustix:secure_linux	trustix secure linux	eq	2.0
mandrakesoft:mandrake_linux_corporate_server	mandrakesoft mandrake linux corporate server	eq	2.1
suse:suse_linux	suse suse linux	eq	9.0
suse:suse_linux	suse suse linux	eq	8.2
redhat:enterprise_linux	redhat enterprise linux	eq	3.0
redhat:enterprise_linux	redhat enterprise linux	eq	2.1
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	9.2
suse:suse_linux	suse suse linux	eq	8.0