CVE-2004-1304

Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://securitytracker.com/id?1012433
http://www.gentoo.org/security/en/glsa/glsa-200412-07.xml
http://www.securityfocus.com/bid/11771	Patch Vendor Advisory
http://www.trustix.net/errata/2004/0063/
https://exchange.xforce.ibmcloud.com/vulnerabilities/18368

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:file:file:4.0:::::::*
	cpe:2.3:a:file:file:4.1:::::::*
	cpe:2.3:a:file:file:4.2:::::::*
	cpe:2.3:a:file:file:4.3:::::::*
	cpe:2.3:a:file:file:4.4:::::::*
	cpe:2.3:a:file:file:4.5:::::::*
	cpe:2.3:a:file:file:4.6:::::::*
	cpe:2.3:a:file:file:4.7:::::::*
	cpe:2.3:a:file:file:4.8:::::::*
	cpe:2.3:a:file:file:4.9:::::::*
	cpe:2.3:a:file:file:4.10:::::::*
	cpe:2.3:a:file:file:4.11:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:gentoo:linux::::::::
	cpe:2.3:o:trustix:secure_linux:2.0:::::::*
	cpe:2.3:o:trustix:secure_linux:2.1:::::::*
	cpe:2.3:o:trustix:secure_linux:2.2:::::::*

History

No history.

Information

Published : 2005-01-10 05:00

Updated : 2017-07-11 01:30

NVD link : CVE-2004-1304

Mitre link : CVE-2004-1304

CVE.ORG link : CVE-2004-1304

JSON object : View

Products Affected

file

file

gentoo

linux

trustix

secure_linux

CWE

NVD-CWE-Other

{"id": "CVE-2004-1304", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-01-10T05:00:00.000", "references": [{"url": "http://securitytracker.com/id?1012433", "source": "cve@mitre.org"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200412-07.xml", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11771", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.trustix.net/errata/2004/0063/", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18368", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file."}], "lastModified": "2017-07-11T01:30:54.480", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:file:file:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8916F2B8-2411-4130-AF9A-2CC4CDFF2E3A"}, {"criteria": "cpe:2.3:a:file:file:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0F56B59-6FA2-44D2-B4DC-58E6C30A4ACC"}, {"criteria": "cpe:2.3:a:file:file:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0318EE80-4042-4347-A7AC-818E5419396E"}, {"criteria": "cpe:2.3:a:file:file:4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91A17FDE-1229-4EB8-AF80-D5398C97E05A"}, {"criteria": "cpe:2.3:a:file:file:4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39AFA1E9-49E9-4BF6-A896-7019A38772C5"}, {"criteria": "cpe:2.3:a:file:file:4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BBDF54B-35C6-47DF-8BA1-39B744381A92"}, {"criteria": "cpe:2.3:a:file:file:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42DCEED6-D422-4F8A-9E1F-DF7FE3C9EADE"}, {"criteria": "cpe:2.3:a:file:file:4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89B92B2A-EFD4-47B0-89B0-3B92FB610091"}, {"criteria": "cpe:2.3:a:file:file:4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D68C976-064C-468D-8B5F-223F12AE7F75"}, {"criteria": "cpe:2.3:a:file:file:4.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9038973-BAC7-4F66-AFBB-15F83C61B9FD"}, {"criteria": "cpe:2.3:a:file:file:4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A722FCC2-E952-476E-97A7-D992F047C6D7"}, {"criteria": "cpe:2.3:a:file:file:4.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E7C8CA5-7BDE-4E7E-A128-31485182E1BC"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "647BA336-5538-4972-9271-383A0EC9378E"}, {"criteria": "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"}, {"criteria": "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}, {"criteria": "cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AB70F82-52BB-4D0D-9A24-9AF67278466D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}