CVE - CVE-2005-1263 (under review) 2007-12-09 01:21:27 Iz|o0|Z907423:1717268|o1560576:15260 dfrws

About CVE

Terminology
Documents
FAQs
CVE List

About CVE Identifiers
Obtain a CVE Identifier
Search CVE
Search NVD
CVE In Use

CVE Compatible Products
NVD for CVE Fix Information
More . . .
News & Events

Calendar
Free Newsletter
Community

CVE Editorial Board
Sponsor
Contact Us

Search the Site

CVE List

Data Updates & RSS Feeds
Reference Key/Maps
Data Sources
Versions
Search Tips
Editor's Commentary
Obtain a CVE Identifier
Editorial Policies
About CVE Identifiers

Items of Interest

Terminology
NVD

CVE-ID
CVE-2005-1263 (under review)	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20050511 Linux kernel ELF core dump privilege elevation URL:http://www.securityfocus.com/archive/1/397966 MISC:http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt FEDORA:FLSA:157459-1 URL:http://www.securityfocus.com/archive/1/archive/1/428028/100/0/threaded FEDORA:FLSA:157459-2 URL:http://www.securityfocus.com/archive/1/archive/1/428058/100/0/threaded FEDORA:FLSA:157459-3 URL:http://www.securityfocus.com/archive/1/archive/1/427980/100/0/threaded REDHAT:RHSA-2005:472 URL:http://www.redhat.com/support/errata/RHSA-2005-472.html REDHAT:RHSA-2005:529 URL:http://www.redhat.com/support/errata/RHSA-2005-529.html REDHAT:RHSA-2005:551 URL:http://www.redhat.com/support/errata/RHSA-2005-551.html SGI:20060402-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U FRSIRT:ADV-2005-0524 URL:http://www.frsirt.com/english/advisories/2005/0524 OVAL:oval:org.mitre.oval:def:1122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1122 SECUNIA:19185 URL:http://secunia.com/advisories/19185 SECUNIA:19607 URL:http://secunia.com/advisories/19607
Status
Candidate	This CVE Identifier has "Candidate" status and must be reviewed and accepted by the CVE Editorial Board before it can be updated to official "Entry" status on the CVE List. It may be modified or even rejected in the future.
Phase
Assigned (20050425)
Votes

Comments

Candidate assigned on 20050425 and proposed on N/A
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org