CVE-2004-0557: conectiva linux

EPSS trend

Probability

25.08%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 25.08% on 18-09-2026

18-09-202618-10-2026

EPSS score

25.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocallinuxVerified
SoX - '.wav' Local Buffer Overflow
Maturity: weaponized
exploit-databaselocallinuxVerified
SoX - Local Buffer Overflow
Maturity: weaponized

References

27 links

www.redhat.com/support/errata/RHSA-2004-409.htmlVendor AdvisoryX Refsource REDHATPatch
www.securityfocus.com/bid/10819VDB EntryX Refsource BIDExploitPatchVendor Advisory
bugzilla.fedora.us/show_bug.cgi?id=1945Vendor AdvisoryX Refsource FEDORA
www.gentoo.org/security/en/glsa/glsa-200407-23.xmlVendor AdvisoryX Refsource GENTOO
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/12175Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/16827VDB EntryX Refsource XF
www.debian.org/security/2004/dsa-565Vendor AdvisoryX Refsource DEBIAN
lwn.net/Articles/95530/Vendor AdvisoryX Refsource FEDORA
lwn.net/Articles/95529/Vendor AdvisoryX Refsource FEDORA

Show all 27 references

archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.htmlMailing ListX Refsource VULNWATCH
www.mandriva.com/security/advisories?name=MDKSA-2004:076Vendor AdvisoryX Refsource MANDRAKE
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855Vendor AdvisoryX Refsource CONECTIVA
seclists.org/fulldisclosure/2004/Jul/1227.htmlMailing ListX Refsource FULLDISC
access.redhat.com/errata/RHSA-2004:409Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=79151REPORT
bugzilla.redhat.com/show_bug.cgi?id=91144REPORT
bugzilla.redhat.com/show_bug.cgi?id=102499REPORT
bugzilla.redhat.com/show_bug.cgi?id=127502REPORT
bugzilla.redhat.com/show_bug.cgi?id=128158REPORT
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_409.jsonAdvisory
access.redhat.com/security/cve/CVE-2004-0557REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617229REPORT
www.cve.org/CVERecord?id=CVE-2004-0557Advisory
nvd.nist.gov/vuln/detail/CVE-2004-0557Advisory
security-tracker.debian.org/tracker/CVE-2004-0557Advisory

Related vulnerabilities

CVE-2018-16850alpinepostgresql+395.15%7y ago13-11-2018 15:00postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.CVE-2018-16395alpineruby+2610.71%7y ago16-11-2018 18:00An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.CVE-2018-16396alpineruby+247.97%7y ago16-11-2018 18:00An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.CVE-2018-16866chainguardpy3-systemd+271.05%7y ago11-01-2019 19:00An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.CVE-2018-1283apache software foundationapache http server+119.74%8y ago26-03-2018 15:00In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

All vulnerabilities inlinux linux enterprise_linux enterprise_linux_desktop fedora_core

CVE-2004-0557: conectiva linux

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References