CVE-2004-1190

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-11911.2Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unaCVE-2004-119210.0Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via forCVE-2004-11936.6Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\pCVE-2004-11945.0Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a lonCVE-2004-11955.0Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a join request that contCVE-2004-11966.8Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via thCVE-2004-11976.8Cross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to inject arbitrary web script or HTML via thCVE-2004-11985.0Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrateCVE-2004-11995.0Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrCVE-2004-12005.0Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using JCVE-2004-12015.0Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using JavascriptCVE-2004-12026.8Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote
CVE-2004-1190: Low severity, CVSS 2.1 | Vulnix