Main
Vulnerability Database
Exploits
ID:10338 - Exploit for Improper input validation in Linux kernel - CVE-2004-1073
ID:10338 - Exploit for Improper input validation in Linux kernel - CVE-2004-1073
Published: August 9, 2024
Vulnerability identifier: #VU95644
Vulnerability risk: Low
CVE-ID: CVE-2004-1073
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to gain access to sensitive information.
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
Remediation
Install update from vendor's repository.