Lucene search
+L

File ELF 4.x - Header Buffer Overflow

🗓️ 29 Nov 2004 00:00:00Reported by anonymousType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 36 Views

Buffer overflow in file command allows code execution, privilege escalation via malicious files.

Related
Code
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Gentoo Linux Data Compromise
28 Apr 201500:00
–bdu_fstec
cve
CVE
CVE-2004-1304
22 Dec 200405:00
–cve
cvelist
Cvelist
CVE-2004-1304
22 Dec 200405:00
–cvelist
debiancve
Debian CVE
CVE-2004-1304
22 Dec 200405:00
–debiancve
euvd
EUVD
EUVD-2004-1301
7 Oct 202500:30
–euvd
nessus
Tenable Nessus
GLSA-200412-07 : file: Arbitrary code execution
14 Dec 200400:00
–nessus
gentoo
Gentoo Linux
file: Arbitrary code execution
13 Dec 200400:00
–gentoo
nvd
NVD
CVE-2004-1304
10 Jan 200505:00
–nvd
openvas
OpenVAS
Gentoo Security Advisory GLSA 200412-07 (file)
24 Sep 200800:00
–openvas
openvas
OpenVAS
Gentoo Security Advisory GLSA 200412-07 (file)
24 Sep 200800:00
–openvas
Rows per page
source: https://www.securityfocus.com/bid/11771/info

The file command is affected by a buffer overflow vulnerability. This issue is due to a failure of the application to properly validate string lengths in the affected file prior to copying them into static process buffers.

An attacker may leverage this issue to execute arbitrary code with the privileges of a user that processes the malicious file with the affected utility. This may be leveraged to escalate privileges or to gain unauthorized access.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/24784.zip

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Apr 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.11396
36