CVE-2005-0666

Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/14489
http://www.securityfocus.com/archive/1/392348
http://www.securityfocus.com/bid/12729	Exploit
http://secunia.com/advisories/14489
http://www.securityfocus.com/archive/1/392348
http://www.securityfocus.com/bid/12729	Exploit

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:the_pax_team:pax_linux:2.2:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.20:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.21:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.22:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.23:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.24:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.25:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.26:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.27:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.4.28:::::::*
	cpe:2.3:a:the_pax_team:pax_linux:2.6.5:::::::*

History

20 Nov 2024, 23:55

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/14489 -~~	() http://secunia.com/advisories/14489 -
References	~~() http://www.securityfocus.com/archive/1/392348 -~~	() http://www.securityfocus.com/archive/1/392348 -
References	~~() http://www.securityfocus.com/bid/12729 - Exploit~~	() http://www.securityfocus.com/bid/12729 - Exploit

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:55

NVD link : CVE-2005-0666

Mitre link : CVE-2005-0666

CVE.ORG link : CVE-2005-0666

JSON object : View

Products Affected

the_pax_team

pax_linux

CWE

NVD-CWE-Other

{"id": "CVE-2005-0666", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"url": "http://secunia.com/advisories/14489", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/392348", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/12729", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/14489", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/392348", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/12729", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code."}], "lastModified": "2024-11-20T23:55:39.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9954840-C7F2-4395-AC59-10B2C21246C8"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16B22449-0C0C-45B3-9D7F-A778E179F57E"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BDD01E4-A51C-4725-BA3A-F15A3CB40EC2"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FE17A36-1AA8-4CE2-92CD-3FD4EA7A2A3E"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC1377A5-B59B-4678-9F46-7698CD0807A5"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7EA43A4E-99F4-4FE6-866B-D279D261AD0A"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E954A75E-28D5-4C39-9AA8-6541B849C115"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6805F737-983F-4E16-A2E5-3917AAD73E9C"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78D07EE2-488C-42CF-AF1F-404F26ABD4B0"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E68615C-5B26-47D8-A7EF-5732E803CA83"}, {"criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83CE3B1E-D4CB-4829-B6B8-080BA6116FA5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}