3.6
CVSSv2

CVE-2003-0018

Published: 19/02/2003 Updated: 07/11/2023
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
VMScore: 320
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

Linux kernel 2.4.10 up to and including 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.4.15

linux linux kernel 2.4.11

linux linux kernel 2.4.12

linux linux kernel 2.4.13

linux linux kernel 2.4.17

linux linux kernel 2.4.10

linux linux kernel 2.4.16

linux linux kernel 2.4.19

linux linux kernel 2.4.14

linux linux kernel 2.4.18

Vendor Advisories

A number of vulnerabilities have been discovered in the Linux kernel CAN-2003-0461: /proc/tty/driver/serial in Linux 24x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords This bug has been fixed by restricting access to ...
The IA-64 maintainers fixed several security related bugs in the Linux kernel 2417 used for the IA-64 architecture, mostly by backporting fixes from 2418 The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CAN-2003-0001: Multiple ethernet network interface card (NIC) device ...