CVE-2005-0666: The Pax Team Pax Linux

Medium severity, CVSS 4.6. EPSS: 2.5% chance of exploitation in the next 30 days.

Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.

Affected products

• The Pax Team Pax Linux: version 2.2 only; version 2.4.20 only; version 2.4.21 only; version 2.4.22 only; version 2.4.23 only; version 2.4.24 only; …

Published 2005-05-02. Last modified 2026-06-16.