CVE-2004-0138

CVE-2004-0138 affects the Linux kernel 2.4 series prior to 2.4.25. The vulnerability lies in the ELF loader: a crafted ELF with an invalid interpreter arch triggers a BUG() when an invalid VMA is unmapped, allowing local denial of service (crash). The issue is mitigated by upgrading to 2.4.25 or ...

CVE-2004-0138

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service crash via a crafted ELF file with an interpreter with an invalid arch architecture, which triggers a BUG when an invalid VMA is unmapped...

DSA-1067-1 kernel-source-2.4.16 - several

Bulletin has no description...

CVE-2005-0138

CVE-2005-0138 affects SGI IRIX 6.5.25–6.5.27 where rpc.mountd does not correctly handle anonymous clients from hosts with undetermined hostnames. The public records describe this as a security-mechanism issue and note there is no clear attacker role, with the CVE possibly not meeting the vulnerab...

CVE-2004-0138

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service crash via a crafted ELF file with an interpreter with an invalid arch architecture, which triggers a BUG when an invalid VMA is unmapped...

BELL-CVE-2004-0138 CVE-2004-0138 does not affect BellSoft software

Bulletin has no description...

CVE-2003-0157

CVE-2003-0157 is rejected/not used and does not represent an active vulnerability entry.

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command...

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 are affected by CVE-2002-0138: local users can read arbitrary files via the show-data command. The issue is documented in Mandrake advisory MDKSA-2005:089, which notes a patch is available for the affected packages. Exploitation details are not provided in the supplied docu...

CVE-2002-0138

CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command...

CVE-2001-0138

CVE-2001-0138 affects wu-ftpd; the privatepw helper allows a local user to overwrite arbitrary files via a symlink attack in wu-ftpd before version 2.6.1-6. The issue stems from a temporary file handling weakness. Mitigation: upgrade wu-ftpd to 2.6.1-6 or newer (as reflected in Debian/Mandrake ad...

CVE-2001-0138

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0138

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2000-0138

CVE-2000-0138 is associated with systems infected by DDoS control tools (master/agent/zombie) such as Trinoo, TFN/TFN2K, stacheldraht, mstream, and shaft. The Connected documents show multiple Nessus plugin detections (e.g., Trinity v3, mstream, Shaft, Trin00) reporting a compromised host running...

CVE-1999-0138

CVE-1999-0138 affects the suidperl and sperl programs, which do not relinquish root privileges when reverting UIDs to the original user. This can grant root access with impact on confidentiality, integrity, and availability as described (local, low complexity, no auth required). The vulnerability...