CVE:CVE-2004-2731
CNNVD:CNNVD-200412-750
Linux kernel 2.4.x至2.4.27，2.6.x至2.6.7，和可能其他版本的Sbus PRO driver (drivers/sbus/char/openprom.c)存在多个整数溢出漏洞。本地用户通过指明（1）copyin_string函数的超小缓冲区大小或者（2）copyin函数的相反缓冲区大小执行任意代码。
solution:Upgrade linux linux_kernel to a higher version than 2.4.0,2.4.0:test1,2.4.0:test10,2.4.0:test11,2.4.0:test12,2.4.0:test2,2.4.0:test3,2.4.0:test4,2.4.0:test5,2.4.0:test6,2.4.0:test7,2.4.0:test8,2.4.0:test9,2.4.1,2.4.2,2.4.3,2.4.3:pre3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.4.9,2.4.9_pre5,2.4.10,2.4.11,2.4.11:pre3,2.4.12,2.4.13,2.4.14,2.4.15,2.4.16,2.4.17,2.4.18,2.4.18:pre1,2.4.18:pre2,2.4.18:pre3,2.4.18:pre4,2.4.18:pre5,2.4.18:pre6,2.4.18:pre7,2.4.18:pre8,2.4.18:pre9,2.4.19,2.4.19:pre1,2.4.19:pre2,2.4.19:pre3,2.4.19:pre4,2.4.19:pre5,2.4.19:pre6,2.4.20,2.4.21,2.4.21:pre1,2.4.21:pre4,2.4.21:pre7,2.4.22,2.4.22:pre10,2.4.23,2.4.23:pre9,2.4.23_ow2,2.4.24,2.4.24_ow1,2.4.25,2.4.26,2.4.27,2.4.27:pre1,2.4.27:pre2,2.4.27:pre3,2.4.27:pre4,2.4.27:pre5,2.4.28,2.4.29,2.4.29:rc1,2.4.29:rc2,2.4.30,2.4.30:rc2,2.4.30:rc3,2.4.31,2.4.31:pre1,2.4.32,2.4.32:pre1,2.4.32:pre2,2.4.33,2.4.33:pre1,2.4.33.2,2.4.33.3,2.4.33.4,2.4.33.5,2.4.34,2.4.34:rc3,2.4.34.1,2.4.34.2,2.4.35,2.4.35.2,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,and avoid the version 2.4.0,2.4.0:test1,2.4.0:test10,2.4.0:test11,2.4.0:test12,2.4.0:test2,2.4.0:test3,2.4.0:test4,2.4.0:test5,2.4.0:test6,2.4.0:test7,2.4.0:test8,2.4.0:test9,2.4.1,2.4.2,2.4.3,2.4.3:pre3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.4.9,2.4.9_pre5,2.4.10,2.4.11,2.4.11:pre3,2.4.12,2.4.13,2.4.14,2.4.15,2.4.16,2.4.17,2.4.18,2.4.18:pre1,2.4.18:pre2,2.4.18:pre3,2.4.18:pre4,2.4.18:pre5,2.4.18:pre6,2.4.18:pre7,2.4.18:pre8,2.4.18:pre9,2.4.19,2.4.19:pre1,2.4.19:pre2,2.4.19:pre3,2.4.19:pre4,2.4.19:pre5,2.4.19:pre6,2.4.20,2.4.21,2.4.21:pre1,2.4.21:pre4,2.4.21:pre7,2.4.22,2.4.22:pre10,2.4.23,2.4.23:pre9,2.4.23_ow2,2.4.24,2.4.24_ow1,2.4.25,2.4.26,2.4.27,2.4.27:pre1,2.4.27:pre2,2.4.27:pre3,2.4.27:pre4,2.4.27:pre5,2.4.28,2.4.29,2.4.29:rc1,2.4.29:rc2,2.4.30,2.4.30:rc2,2.4.30:rc3,2.4.31,2.4.31:pre1,2.4.32,2.4.32:pre1,2.4.32:pre2,2.4.33,2.4.33:pre1,2.4.33.2,2.4.33.3,2.4.33.4,2.4.33.5,2.4.34,2.4.34:rc3,2.4.34.1,2.4.34.2,2.4.35,2.4.35.2,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7