CVE-2004-0497

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files,...

2.1 LowPublic exploitFix available

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Exploit likelihood

0.81%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Record: CVE-2004-0497
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Record: CVE-2004-0497
Updated: 2026-11-02

EUVDEUVD-2004-0496 No score

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Record: EUVD-2004-0496
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3975-v726-f8hr No score

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files,...

Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

Record: GHSA-3975-v726-f8hr
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-BOOT` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-debuginfo` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-doc` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem-unsupported` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp-unsupported` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-source` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-unsupported` Red Hat:enterprise_linux:3::as	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL

Show 30 moreShow less

Affected packages
Package	Affected	Fixed
`kernel` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-BOOT` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-doc` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem-unsupported` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp-unsupported` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-source` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-unsupported` Red Hat:enterprise_linux:3::desktop	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-BOOT` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-debuginfo` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-doc` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem-unsupported` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp-unsupported` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-source` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-unsupported` Red Hat:enterprise_linux:3::es	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-BOOT` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-doc` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-hugemem-unsupported` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-smp-unsupported` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-source` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL
`kernel-unsupported` Red Hat:enterprise_linux:3::ws	before 0:2.4.21-15.0.3.EL	0:2.4.21-15.0.3.EL

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Linux Kernel < 2.6.7-rc3 (Slackware 9.1 / Debian 3.0) - 'sys_chown()' Group Ownership Alteration Privilege Escalation	2004-12-24

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0497 is a low vulnerability (CVSS 2.1) in Conectiva Linux, published July 6, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in kernel 0:2.4.21-15.0.3.EL.

References

Show 11 moreShow less