CVE-2004-0497: Conectiva Linux

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Affected products

• Conectiva Linux: version 10 only
• Gentoo Linux: any version
• Linux Linux Kernel: version 2.0 only
• Mandrakesoft Mandrake Linux: version 9.1 only; version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Mandrakesoft Mandrake Multi Network Firewall: version 8.2 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only
• Trustix Secure Linux: version 2 only; version 2.0 only; version 2.1 only

Published 2004-12-06. Last modified 2026-06-16.