CVE-2004-2477 - Vulnerability Details - OpenCVE

DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT found in ntoskrnl.exe.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Diamondcs	Process Guard Free

Configuration 1 [-]

cpe:2.3:a:diamondcs:process_guard_free:2.000:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/12033
http://www.osvdb.org/7606
http://www.security.org.sg/vuln/procguard.html
http://www.securityfocus.com/bid/10675
http://www.securitytracker.com/alerts/2004/Jul/1010662.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/16654

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-08-21T04:00:00

Updated: 2024-08-08T01:29:13.670Z

Reserved: 2005-08-21T00:00:00

Link: CVE-2004-2477

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2004-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2004-2477

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-07-07T00:00:00", "descriptions": [{"lang": "en", "value": "DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \\device\\physicalmemory with the original SDT found in ntoskrnl.exe."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "10675", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/10675"}, {"name": "diamondcs-process-guard-disable-protection(16654)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16654"}, {"name": "7606", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/7606"}, {"name": "12033", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/12033"}, {"tags": ["x_refsource_MISC"], "url": "http://www.security.org.sg/vuln/procguard.html"}, {"name": "1010662", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/alerts/2004/Jul/1010662.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-2477", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \\device\\physicalmemory with the original SDT found in ntoskrnl.exe."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "10675", "refsource": "BID", "url": "http://www.securityfocus.com/bid/10675"}, {"name": "diamondcs-process-guard-disable-protection(16654)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16654"}, {"name": "7606", "refsource": "OSVDB", "url": "http://www.osvdb.org/7606"}, {"name": "12033", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/12033"}, {"name": "http://www.security.org.sg/vuln/procguard.html", "refsource": "MISC", "url": "http://www.security.org.sg/vuln/procguard.html"}, {"name": "1010662", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/alerts/2004/Jul/1010662.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:29:13.670Z"}, "title": "CVE Program Container", "references": [{"name": "10675", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/10675"}, {"name": "diamondcs-process-guard-disable-protection(16654)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16654"}, {"name": "7606", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/7606"}, {"name": "12033", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/12033"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.security.org.sg/vuln/procguard.html"}, {"name": "1010662", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/alerts/2004/Jul/1010662.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2477", "datePublished": "2005-08-21T04:00:00", "dateReserved": "2005-08-21T00:00:00", "dateUpdated": "2024-08-08T01:29:13.670Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:diamondcs:process_guard_free:2.000:*:*:*:*:*:*:*", "matchCriteriaId": "E360DE24-67C1-4AA1-8763-5B5F2DA14AB0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \\device\\physicalmemory with the original SDT found in ntoskrnl.exe."}], "id": "CVE-2004-2477", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/12033"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/7606"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.security.org.sg/vuln/procguard.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/10675"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securitytracker.com/alerts/2004/Jul/1010662.html"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16654"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/12033"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/7606"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.security.org.sg/vuln/procguard.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/10675"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securitytracker.com/alerts/2004/Jul/1010662.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16654"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}