CVE-2004-1235

MEDIUM 6.2CVE-2004-1235 · Published 14/04/2005 · updated 16/06/2026

In short

CVE-2004-1235 is a MEDIUM (CVSS 6.2) vulnerability affecting mandrake multi network firewall (mandrakesoft).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mandrake multi network firewall mandrakesoft	`= 8.2`	No fix yet

Description

Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.

References

distro.conectiva.com.br/atualizacoes/index.php
isec.pl/vulnerabilities/isec-0021-uselib.txt
marc.info
secunia.com/advisories/20162
secunia.com/advisories/20163
secunia.com/advisories/20202
secunia.com/advisories/20338
debian.org/security/2006/dsa-1067
debian.org/security/2006/dsa-1069
debian.org/security/2006/dsa-1070
debian.org/security/2006/dsa-1082
mandriva.com/security/advisories
novell.com/linux/security/advisories/2005_01_sr.html
redhat.com/support/errata/RHSA-2005-016.html
redhat.com/support/errata/RHSA-2005-017.html

More vulnerabilities in mandrake multi network firewall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free