CVE-2004-0564 - CVE House
Back to Database
Status published Low CVE-2004-0564

Roaring Penguin pppoe (rp-ppoe), if installed or configured to run...

Vulnerability Description

Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0564

Credits & Attribution

No credits recorded in the NVD database.

References

More from roaring penguin

View All →
CVE-2007-0884
Buffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60 allows...
High 7.5
CVE-2004-1098
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus...
High 7.5
CVE-2001-0026
rp-pppoe PPPoE client allows remote attackers to cause a denial...
Medium 5

Affected Vendor

roaring penguin

View all reports →

Affected Software

pppoe, debian linux
Vulnerable Versions:
3.0, 3.3, 3.5

Timeline

Official Publish: November 19th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.