How severe is CVE-2004-0497?

CVE-2004-0497 has a CVSS 2.0 base score of 2.1, rated low severity.

Is CVE-2004-0497 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (52nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2004-0497?

CVE-2004-0497 primarily affects Mandrakesoft Mandrake Multi Network Firewall. In total, 22 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2004-0497?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2004-0497 published?

CVE-2004-0497 was published on 2004-12-06 and last updated on 2026-06-16.

CVE-2004-0497

CVE-2004-0497 is a low-severity vulnerability in Mandrakesoft Mandrake Multi Network Firewall with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.1)
EPSS exploit prediction: 1% (52nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Mandrakesoft Mandrake Multi Network Firewall
Published: 2004-12-06
Last modified: 2026-06-16

Description

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Frequently asked questions

What is CVE-2004-0497?: Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
How severe is CVE-2004-0497?: CVE-2004-0497 has a CVSS 2.0 base score of 2.1, rated low severity.
Is CVE-2004-0497 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (52nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2004-0497?: CVE-2004-0497 primarily affects Mandrakesoft Mandrake Multi Network Firewall. In total, 22 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2004-0497?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2004-0497 published?: CVE-2004-0497 was published on 2004-12-06 and last updated on 2026-06-16.

References

Affected products (22)

cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*
cpe:2.3:o:conectiva:linux:10:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*

More vulnerabilities in Mandrakesoft Mandrake Multi Network Firewall

CVE-2003-0041 — Critical (CVSS 10.0): Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is…
CVE-2007-1351 — High (CVSS 8.5): Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype…
CVE-2007-5116 — High (CVSS 7.5): Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows…
CVE-2004-1051 — High (CVSS 7.2): sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to…
CVE-2004-0834 — High (CVSS 7.2): Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1)…
CVE-2004-0496 — High (CVSS 7.2): Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a…

All CVEs affecting Mandrakesoft Mandrake Multi Network Firewall →