CVE-2004-0535
Low
Description
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
SeverityLow
CVSS2.1
Exploit probability—
Product
Conectiva Linux
PublishedAug 6, 2004
First seenAug 6, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| conectiva linux | 8.0, 9.0 | — |
| mandrakesoft mandrake_multi_network_firewall | 8.2 | — |
| suse suse_email_server | 3.1, iii | — |
| suse suse_linux_admin-cd_for_firewall | No range specified | — |
| suse suse_linux_connectivity_server | No range specified | — |
| suse suse_linux_database_server | No range specified | — |
| suse suse_linux_firewall_cd | No range specified | — |
| suse suse_linux_firewall_live-cd | No range specified | — |
| suse suse_linux_office_server | No range specified | — |
| suse suse_office_server | No range specified | — |
| engardelinux secure_community | 2.0 | — |
| engardelinux secure_linux | 1.5 | — |
| gentoo linux | 1.4 | — |
| linux linux_kernel | 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.15, 2.4.16, 2.4.17, 2.4.18, 2.4.19, 2.4.20, 2.4.21, 2.4.22, 2.4.23, 2.4.23_ow2, 2.4.24, 2.4.24_ow1, 2.4.25, 2.4.26, 2.4.27 | — |
| mandrakesoft mandrake_linux | 9.1, 9.2, 10.0 | — |
| mandrakesoft mandrake_linux_corporate_server | 2.1 | — |
| suse suse_linux | 7, 8, 8.0, 8.1, 8.2, 9.0, 9.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.