OSVDB ID: 11597

Title: Linux Kernel ELF Binary Loader Bad Return Value Issue

Info

Disclosure
Nov 10, 2004

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 The ELF binary loader in the Linux kernel contains a flaw that may allow a malicious user to manipulate the system into returning a smaller value than requested when filling kernel buffers. The issue is triggered when the kernel_read() function returns a positive but smaller value than requested. It is possible that the flaw may allow the attacker to supply an arbitrary memory layout for the binary, resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Linux Kernel Organization, Inc.

Kernel

 2.4.0x
2.4.1x
2.4.20
2.4.21
2.4.22
2.4.23
2.4.24
2.4.25
2.4.26
2.4.27
2.6.0
2.6.1
2.6.2
2.6.3
2.6.4
2.6.5
2.6.6
2.6.7
2.6.8
2.6.9

References

Credit
  • Paul Starzetz - ihaquerisec.pl - iSEC Security Research


Direct URL: http://osvdb.org/11597