CVE - CVE-2005-1263

CVE-ID
CVE-2005-1263	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:13589 URL:http://www.securityfocus.com/bid/13589 MISC:19185 URL:http://secunia.com/advisories/19185 MISC:19607 URL:http://secunia.com/advisories/19607 MISC:20050511 Linux kernel ELF core dump privilege elevation URL:http://www.securityfocus.com/archive/1/397966 MISC:20060402-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U MISC:ADV-2005-0524 URL:~~http://www.vupen.com/english/advisories/2005/0524~~ (Obsolete source) MISC:FLSA:157459-1 URL:http://www.securityfocus.com/archive/1/428028/100/0/threaded MISC:FLSA:157459-2 URL:http://www.securityfocus.com/archive/1/428058/100/0/threaded MISC:FLSA:157459-3 URL:http://www.securityfocus.com/archive/1/427980/100/0/threaded MISC:RHSA-2005:472 URL:http://www.redhat.com/support/errata/RHSA-2005-472.html MISC:RHSA-2005:529 URL:http://www.redhat.com/support/errata/RHSA-2005-529.html MISC:RHSA-2005:551 URL:http://www.redhat.com/support/errata/RHSA-2005-551.html MISC:http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt URL:http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt MISC:oval:org.mitre.oval:def:10909 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10909 MISC:oval:org.mitre.oval:def:1122 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122
Assigning CNA
Red Hat, Inc.
Date Record Created
20050425	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050425)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)