2.4.2

DATE	CVE	VULNERABILITY TITLE	RISK
2004-05-26	CVE-2004-2135	Information Disclosure vulnerability in Linux Kernel Cryptoloop cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption. local low complexity linux	2.1
2004-03-15	CVE-2004-0075	Unspecified vulnerability in Linux Kernel The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service. local low complexity linux	2.1
2004-03-03	CVE-2004-0077	Local Privilege Escalation vulnerability in Linux Kernel do_mremap Function VMA Limit The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985. local low complexity redhat linux netwosix trustix	7.2
2004-03-03	CVE-2004-0010	Local Privilege Escalation vulnerability in Linux Kernel NCPFS ncp_lookup() Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges. local low complexity linux	7.2
2004-03-03	CVE-2004-0003	Privilege Escalation vulnerability in Linux Kernel R128 Device Driver Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking." local low complexity linux	4.6
2004-03-03	CVE-2002-1574	Unspecified vulnerability in Linux Kernel Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors. local low complexity linux	4.6
2004-01-20	CVE-2003-0985	Unspecified vulnerability in Linux Kernel The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077. local low complexity linux	7.2
2004-01-05	CVE-2003-0984	Unspecified vulnerability in Linux Kernel Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space. local low complexity linux	4.6
2003-12-15	CVE-2003-0961	Unspecified vulnerability in Linux Kernel Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges. local low complexity linux	7.2
2003-08-27	CVE-2003-0619	Unspecified vulnerability in Linux Kernel Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call. network low complexity linux	5.0