kernel - root exploit in MCAST

Package(s):

kernel

CVE #(s):

CAN-2004-0424

Created:

April 22, 2004

Updated:

June 11, 2004

Description:

A locally exploitable integer overflow has been found the multicast code of the Linux kernel versions 2.4.22 to 2.4.25 and 2.6.1 - 2.6.3. A successful exploit could lead to full superuser privileges.

Alerts:

Whitebox	WBSA-2004:183-01	2004-06-10
SuSE	SuSE-SA:2004:010	2004-05-05
Slackware	SSA:2004-119-01	2004-04-28
Mandrake	MDKSA-2004:037	2004-04-27
Red Hat	RHSA-2004:183-01	2004-04-22
Fedora	FEDORA-2004-111	2004-04-22
Trustix	TSLSA-2004-0022	2004-04-21

(Log in to post comments)

kernel - root exploit in MCAST_MSFILTER

Posted Apr 29, 2004 9:37 UTC (Thu) by Ross (subscriber, #4065) [Link]

It looks to be a bug in the socket option system calls so it should be
local only. The title doesn't make that clear.