Every CVE Search/ Get API key

CVE-2004-1190

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands...

2.1 Low

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

Exploit likelihood

0.40%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

Record
CVE-2004-1190
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

Record
CVE-2004-1190
Updated
2026-11-02
EUVDEUVD-2004-1187 No score

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

Record
EUVD-2004-1187
Updated
2026-11-03
GitHub AdvisoriesGHSA-6q77-qw67-r7r7 No score

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands...

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.

Record
GHSA-6q77-qw67-r7r7
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-doc
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
Show 22 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-doc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-doc
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-doc
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-hugemem-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL
kernel-smp-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 17 CVEs
before 0:2.6.9-22.0.2.EL
0:2.6.9-22.0.2.EL

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-1190 is a low vulnerability (CVSS 2.1) in Suse Linux, published December 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. No source names a fixed version.

References

Show 89 moreShow less
MoveEnter Open