« Volver al listado

CVE-2004-0564

Estado: ModificadaBaja (2.1)—

Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Debian — Debian LinuxRoaring Penguin — Pppoe

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0564",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-12-23T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=110247119200510&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=110253341209450&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2004/dsa-557",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/11315",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17576",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=110247119200510&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=110253341209450&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2004/dsa-557",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/11315",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17576",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files.  NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe \"is NOT designed to run setuid-root.\"  Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings."
    },
    {
      "lang": "es",
      "value": "Roaring Penguin pppoe, cuando se ejecuta con setuid root, no libera privilegios adecuadamente, lo que permite a usuarios locales sobreescribir ficheros arbitrarios."
    }
  ],
  "lastModified": "2026-06-16T22:05:53.173",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:roaring_penguin:pppoe:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F1F5B1D-4264-4877-91D5-BCFF26D6F538"
            },
            {
              "criteria": "cpe:2.3:a:roaring_penguin:pppoe:3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C270453-511A-4924-8200-D847BC8AE748"
            },
            {
              "criteria": "cpe:2.3:a:roaring_penguin:pppoe:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40DFDDE1-5F26-4F1B-90E4-916BD22A7C0A"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6B060E4-B5A6-4469-828E-211C52542547"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "974C3541-990C-4CD4-A05A-38FA74A84632"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9419322-572F-4BB6-8416-C5E96541CF33"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFC50555-C084-46A3-9C9F-949C5E3BB448"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD18A446-C634-417E-86AC-B19B6DDDC856"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4BB852E-61B2-4842-989F-C6C0C901A8D7"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24DD9D59-E2A2-4116-A887-39E8CC2004FC"
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F28D7457-607E-4E0C-909A-413F91CFCD82"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}