Lucene search
K

CVE-2004-0497

🗓️ 06 Jul 2004 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files

Related
Detection
Refs
Paths
NVD
ParameterPositionPathDescriptionCWE
file_namepath/etc/shadowUnauthenticated or unintended chown manipulation on files to escalate privileges (e.g., changing group ownership on NFS/exported files).CWE-264
file_namepath/dev/memAccess to raw memory device via improper DAC controls enabling privilege escalation or data leakage.CWE-264
file_namepath/dev/kmemAccess to kernel memory via chown-like misuse enabling privilege escalation or data leakage.CWE-264
file_namepath/dev/hd*/Access to disk device files through improper DAC checks enabling unauthorized read/write operations.CWE-264
file_namepath/dev/sd*/Access to disk device files through improper DAC checks enabling unauthorized read/write operations.CWE-264
file_namepath/dev/tty*Access to TTY device files allowing snooping or command execution due to missing DAC controls.CWE-264
file_namepath/dev/pts*Access to pseudo-terminal devices enabling command execution due to missing DAC controls.CWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Apr 2026 00:27Current
5.7Medium risk
Vulners AI Score5.7
CVSS 22.1
EPSS0.00306
80