CVE-2004-1235

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

CVSS v2.0 NVD

6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C

EPSS

2.89% chance of exploitation in the next 30 days, 87th percentile

Published

2005-01-20

Updated

2024-08-08

Proof-of-concept exploits (1)

• 0b0111100/20040★ · 2026-09-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/895
• https://www.exploit-db.com/exploits/778
• https://www.exploit-db.com/exploits/744

Exploit collections (1)

• CVE-2004-1235helloexp/0day

Security advisories

• http://www.redhat.com/support/errata/RHSA-2005-043.html
• http://www.securityfocus.com/bid/12190
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:022
• http://www.redhat.com/support/errata/RHSA-2005-016.html
• http://www.redhat.com/support/errata/RHSA-2005-017.html
• http://www.redhat.com/support/errata/RHSA-2005-092.html

References

• CVE Record
• NVD entry

Related

• CVE-2004-0077
• CVE-2005-0736
• CVE-2005-1263
• CVE-2006-2451
• CVE-2006-3626
• CVE-2008-0600