CVE-2004-0177

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-01782.1The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certaCVE-2004-01796.8Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) SubversioCVE-2004-01802.6The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absoluteCVE-2004-01812.1The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, whCVE-2004-01825.0Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.CVE-2004-01835.0TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with aCVE-2004-01845.0Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ICVE-2004-018510.0Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of servCVE-2004-01867.2smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that cCVE-2004-01887.2Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.CVE-2004-01897.5The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00CVE-2004-01907.5Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the admi
CVE-2004-0177: Medium severity, CVSS 5.0 | Vulnix