2.4.14

DATE	CVE	VULNERABILITY TITLE	RISK
2004-03-03	CVE-2004-0077	Local Privilege Escalation vulnerability in Linux Kernel do_mremap Function VMA Limit The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985. local low complexity redhat linux netwosix trustix	7.2
2004-03-03	CVE-2004-0010	Local Privilege Escalation vulnerability in Linux Kernel NCPFS ncp_lookup() Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges. local low complexity linux	7.2
2004-03-03	CVE-2004-0003	Privilege Escalation vulnerability in Linux Kernel R128 Device Driver Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking." local low complexity linux	4.6
2004-03-03	CVE-2002-1574	Unspecified vulnerability in Linux Kernel Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors. local low complexity linux	4.6
2004-01-20	CVE-2003-0985	Unspecified vulnerability in Linux Kernel The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077. local low complexity linux	7.2
2004-01-05	CVE-2003-0984	Unspecified vulnerability in Linux Kernel Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space. local low complexity linux	4.6
2003-12-15	CVE-2003-0961	Unspecified vulnerability in Linux Kernel Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges. local low complexity linux	7.2
2003-08-27	CVE-2003-0619	Unspecified vulnerability in Linux Kernel Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call. network low complexity linux	5.0
2003-08-27	CVE-2003-0462	A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash). local high complexity mandrakesoft linux	1.2
2003-07-25	CVE-2003-0643	Denial-Of-Service vulnerability in kernel Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash). local low complexity linux	2.1