exploits , vulnerabilities , articles , Linux Kernel ELF Core Dump Local Buffer Overflow Vulnerability

Title	Linux Kernel ELF Core Dump Local Buffer Overflow Vulnerability
Published	2005-05-11-12:00AM
Updated	2005-08-17-06:37PM
Class	Boundary Condition Error
CVE	CAN-2005-1263
Remote	No
Local	Yes
Credit	Paul Starzetz <ihaquer@isec.pl> is credited with the discovery of this vulnerability.
Vulnerable	Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Trustix Secure Enterprise Linux 2.0 RedHat Fedora Core3 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux AS 3 RedHat Desktop 3.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 10.2 x86_64 MandrakeSoft Linux Mandrake 10.2 MandrakeSoft Linux Mandrake 10.1 x86_64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.0 amd64 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 2.1 Linux kernel 2.5.69 Linux kernel 2.5.68 Linux kernel 2.5.67 Linux kernel 2.5.66 Linux kernel 2.5.65 Linux kernel 2.5.64 Linux kernel 2.5.63 Linux kernel 2.5.62 Linux kernel 2.5.61 Linux kernel 2.5.60 Linux kernel 2.5.59 Linux kernel 2.5.58 Linux kernel 2.5.57 Linux kernel 2.5.56 Linux kernel 2.5.55 Linux kernel 2.5.54 Linux kernel 2.5.53 Linux kernel 2.5.52 Linux kernel 2.5.51 Linux kernel 2.5.50 Linux kernel 2.5.49 Linux kernel 2.5.48 Linux kernel 2.5.47 Linux kernel 2.5.46 Linux kernel 2.5.45 Linux kernel 2.5.44 Linux kernel 2.5.43 Linux kernel 2.5.42 Linux kernel 2.5.41 Linux kernel 2.5.40 Linux kernel 2.5.39 Linux kernel 2.5.38 Linux kernel 2.5.37 Linux kernel 2.5.36 Linux kernel 2.5.35 Linux kernel 2.5.34 Linux kernel 2.5.33 Linux kernel 2.5.32 Linux kernel 2.5.31 Linux kernel 2.5.30 Linux kernel 2.5.29 Linux kernel 2.5.28 Linux kernel 2.5.27 Linux kernel 2.5.26 Linux kernel 2.5.25 Linux kernel 2.5.24 Linux kernel 2.5.23 Linux kernel 2.5.22 Linux kernel 2.5.21 Linux kernel 2.5.20 Linux kernel 2.5.19 Linux kernel 2.5.18 Linux kernel 2.5.17 Linux kernel 2.5.16 Linux kernel 2.5.15 Linux kernel 2.5.14 Linux kernel 2.5.13 Linux kernel 2.5.12 Linux kernel 2.5.11 Linux kernel 2.5.10 Linux kernel 2.5.9 Linux kernel 2.5.8 Linux kernel 2.5.7 Linux kernel 2.5.6 Linux kernel 2.5.5 Linux kernel 2.5.4 Linux kernel 2.5.3 Linux kernel 2.5.2 Linux kernel 2.5.1 Linux kernel 2.5 .0 Linux kernel 2.4.31 pre1 Linux kernel 2.4.30 rc3 Linux kernel 2.4.30 rc2 Linux kernel 2.4.30 Linux kernel 2.4.29 rc2 Linux kernel 2.4.29 rc1 Linux kernel 2.4.29 Linux kernel 2.4.28 Linux kernel 2.4.27 pre5 Linux kernel 2.4.27 pre4 Linux kernel 2.4.27 pre3 Linux kernel 2.4.27 pre2 Linux kernel 2.4.27 pre1 Linux kernel 2.4.27 Linux kernel 2.4.26 Linux kernel 2.4.25 Linux kernel 2.4.24 ow1 Linux kernel 2.4.24 Linux kernel 2.4.23 pre9 Linux kernel 2.4.23 ow2 Linux kernel 2.4.23 Linux kernel 2.4.22 DevilLinux DevilLinux 1.0.4 DevilLinux DevilLinux 1.0.5 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 RedHat Fedora Core1 Slackware Linux 9.1 Linux kernel 2.4.21 pre7 Linux kernel 2.4.21 pre4 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc Linux kernel 2.4.21 pre1 Linux kernel 2.4.21 Conectiva Linux 9.0 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 S.u.S.E. Linux Enterprise Server 8 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 x86_64 Linux kernel 2.4.20 Linux kernel 2.4.19 pre6 Linux kernel 2.4.19 pre5 Linux kernel 2.4.19 pre4 Linux kernel 2.4.19 pre3 Linux kernel 2.4.19 pre2 Linux kernel 2.4.19 pre1 Linux kernel 2.4.19 Linux kernel 2.4.18 pre8 Linux kernel 2.4.18 pre7 Linux kernel 2.4.18 pre6 Linux kernel 2.4.18 pre5 Linux kernel 2.4.18 pre4 Linux kernel 2.4.18 pre3 Linux kernel 2.4.18 pre2 Linux kernel 2.4.18 pre1 Linux kernel 2.4.18 x86 Linux kernel 2.4.18 Linux kernel 2.4.17 Linux kernel 2.4.16 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1.1 Linux kernel 2.4.12 Conectiva Linux 7.0 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 Linux kernel 2.4.8 Linux kernel 2.4.7 RedHat Linux 7.2 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.2 Linux kernel 2.4.6 Linux kernel 2.4.5 Slackware Linux 8.0 Linux kernel 2.4.4 Linux kernel 2.4.3 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 .0test9 Linux kernel 2.4 .0test8 Linux kernel 2.4 .0test7 Linux kernel 2.4 .0test6 Linux kernel 2.4 .0test5 Linux kernel 2.4 .0test4 Linux kernel 2.4 .0test3 Linux kernel 2.4 .0test2 Linux kernel 2.4 .0test12 Linux kernel 2.4 .0test11 Linux kernel 2.4 .0test10 Linux kernel 2.4 .0test1 Linux kernel 2.4 Linux kernel 2.3.99 pre7 Linux kernel 2.3.99 pre6 Linux kernel 2.3.99 pre5 Linux kernel 2.3.99 pre4 Linux kernel 2.3.99 pre3 Linux kernel 2.3.99 pre2 Linux kernel 2.3.99 pre1 Linux kernel 2.3.99 Linux kernel 2.3 .x Linux kernel 2.3 Linux kernel 2.2.27 rc2 Linux kernel 2.2.27 rc1 Linux kernel 2.2.26 Linux kernel 2.2.25 Linux kernel 2.2.24 Linux kernel 2.2.23 Linux kernel 2.2.22 Linux kernel 2.2.21 Linux kernel 2.2.20 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc Linux kernel 2.2.19 Linux kernel 2.2.18 Caldera OpenLinux 2.4 Conectiva Linux ecommerce Conectiva Linux graficas Conectiva Linux 4.0 Conectiva Linux 4.0 es Conectiva Linux 4.1 Conectiva Linux 4.2 Conectiva Linux 5.0 Conectiva Linux 5.1 Conectiva Linux 6.0 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc MandrakeSoft Linux Mandrake 6.0 MandrakeSoft Linux Mandrake 6.1 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 RedHat Linux 6.0 RedHat Linux 6.0 alpha RedHat Linux 6.0 sparc RedHat Linux 6.1 alpha RedHat Linux 6.1 i386 RedHat Linux 6.1 sparc RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.0 sparc S.u.S.E. Linux 6.0 S.u.S.E. Linux 6.1 S.u.S.E. Linux 6.1 alpha S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.3 alpha S.u.S.E. Linux 6.3 ppc S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 alpha S.u.S.E. Linux 6.4 ppc S.u.S.E. Linux 7.0 SCO eDesktop 2.4 SCO eServer 2.3.1 Slackware Linux 4.0 Slackware Linux 7.0 Slackware Linux 7.1 Wirex Immunix OS 6.2 Wirex Immunix OS 7.0 Wirex Immunix OS 7.0 Beta Linux kernel 2.2.17 MandrakeSoft Linux Mandrake 7.2 S.u.S.E. Linux 7.0 Trustix Secure Linux 1.2 Linux kernel 2.2.16 pre6 Linux kernel 2.2.16 Linux kernel 2.2.15 pre20 Linux kernel 2.2.15 pre16 Linux kernel 2.2.15 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 Linux kernel 2.2.14 RedHat Linux 6.2 SCO eDesktop 2.4 SCO eServer 2.3.1 Sun Cobalt RaQ 4 Linux kernel 2.2.13 S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.4 Linux kernel 2.2.12 Linux kernel 2.2.11 Linux kernel 2.2.10 Linux kernel 2.2.9 Linux kernel 2.2.8 Linux kernel 2.2.7 Linux kernel 2.2.6 Linux kernel 2.2.5 Linux kernel 2.2.4 Linux kernel 2.2.3 Linux kernel 2.2.2 Linux kernel 2.2.1 Linux kernel 2.2 .x Linux kernel 2.2 Conectiva Linux 10.0 Avaya S8710 R2.0.1 Avaya S8710 R2.0.0 Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya Modular Messaging (MSS) 2.0 Avaya Modular Messaging (MSS) 1.1 Avaya MN100 Avaya Intuity LX Avaya Integrated Management Avaya CVLAN Avaya Converged Communications Server 2.0
Not Vulnerable
Code	Paul Starzetz <ihaquer@isec.pl> provided the following proof of concept, denial of service code: /data/vulnerabilities/exploits/elfcd.sh
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Drupal Sections Module HTML Injection Vulnerability
2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability