« Back to list

CVE-2005-0666

Status: ModifiedMedium (4.6)—

Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

THE PAX Team — PAX Linux

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2005-0666",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-05-02T04:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/14489",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/392348",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/12729",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/14489",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/392348",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/12729",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code."
    }
  ],
  "lastModified": "2026-06-16T22:11:32.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9954840-C7F2-4395-AC59-10B2C21246C8"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16B22449-0C0C-45B3-9D7F-A778E179F57E"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BDD01E4-A51C-4725-BA3A-F15A3CB40EC2"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FE17A36-1AA8-4CE2-92CD-3FD4EA7A2A3E"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC1377A5-B59B-4678-9F46-7698CD0807A5"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.24:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EA43A4E-99F4-4FE6-866B-D279D261AD0A"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E954A75E-28D5-4C39-9AA8-6541B849C115"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.26:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6805F737-983F-4E16-A2E5-3917AAD73E9C"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78D07EE2-488C-42CF-AF1F-404F26ABD4B0"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.4.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E68615C-5B26-47D8-A7EF-5732E803CA83"
            },
            {
              "criteria": "cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83CE3B1E-D4CB-4829-B6B8-080BA6116FA5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}