CVE-2004-0564

LOW 2.1CVE-2004-0564 · Published 23/12/2004 · updated 16/06/2026

In short

CVE-2004-0564 is a LOW (CVSS 2.1) vulnerability affecting pppoe (roaring penguin).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pppoe roaring_penguin	`= 3.0= 3.3= 3.5`	No fix yet

Description

Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.

References

More vulnerabilities in pppoe

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free