CVE-2004-1337 The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to ga...
HighCVSS 7.2
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU realtime linux security module | = 0.8.7 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
References
- CLA-2005:930 vendor-advisory
- 20041223 Linux 2.6 Kernel Capability LSM Module Local Privilege Elevation mailing-list
- 12093 patch vdb-entry vendor-advisory
- linux-security-module-gain-privileges(18673) vdb-entry