Published: 31/03/2003 Updated: 03/05/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 740

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The kernel module loader in Linux kernel 2.2.x prior to 2.2.25, and 2.4.x prior to 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.2.0
linux linux kernel 2.2.15
linux linux kernel 2.2.16
linux linux kernel 2.2.22
linux linux kernel 2.2.13
linux linux kernel 2.2.14
linux linux kernel 2.2.20
linux linux kernel 2.2.21
linux linux kernel 2.2.7
linux linux kernel 2.2.8
linux linux kernel 2.4.13
linux linux kernel 2.4.14
linux linux kernel 2.4.20
linux linux kernel 2.4.21
linux linux kernel 2.2.11
linux linux kernel 2.2.12
linux linux kernel 2.2.19
linux linux kernel 2.2.2
linux linux kernel 2.2.4
linux linux kernel 2.2.5
linux linux kernel 2.2.6
linux linux kernel 2.4.11
linux linux kernel 2.4.12
linux linux kernel 2.4.19
linux linux kernel 2.4.2
linux linux kernel 2.4.8
linux linux kernel 2.4.9
linux linux kernel 2.2.23
linux linux kernel 2.2.9
linux linux kernel 2.4.0
linux linux kernel 2.4.15
linux linux kernel 2.4.16
linux linux kernel 2.4.3
linux linux kernel 2.4.4
linux linux kernel 2.2.1
linux linux kernel 2.2.10
linux linux kernel 2.2.17
linux linux kernel 2.2.18
linux linux kernel 2.2.24
linux linux kernel 2.2.3
linux linux kernel 2.4.1
linux linux kernel 2.4.10
linux linux kernel 2.4.17
linux linux kernel 2.4.18
linux linux kernel 2.4.5
linux linux kernel 2.4.6
linux linux kernel 2.4.7

The IA-64 maintainers fixed several security related bugs in the Linux kernel 2417 used for the IA-64 architecture, mostly by backporting fixes from 2418 The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CAN-2003-0001: Multiple ethernet network interface card (NIC) device ...

The kernel module loader in Linux 22 and Linux 24 kernels has a flaw in ptrace This hole allows local users to obtain root privileges by using ptrace to attach to a child process that is spawned by the kernel Remote exploitation of this hole is not possible This advisory only covers kernel packages for the S/390 architecture Other architectur ...

A number of vulnerabilities have been discovered in the Linux kernel CAN-2002-1380: Linux kernel 22x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface CVE-2002-0429: The iBCS routines in arch/i386/kernel/t ...

Several serious problems have been discovered in the Linux kernel This update takes care of Linux 2416 for the ARM architecture The Common Vulnerabilities and Exposures project identifies the following problems that will be fixed with this update: CAN-2003-0127 The kernel module loader allows local users to gain root privileges by usin ...

A number of vulnerabilities have been discovered in the Linux kernel CVE-2002-0429: The iBCS routines in arch/i386/kernel/trapsc for Linux kernels 2418 and earlier on x86 systems allow local users to kill arbitrary processes via a binary compatibility interface (lcall) CAN-2003-0001: Multiple ethernet Network Interface Card (NIC) device ...

/* source: wwwsecurityfocuscom/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace() system call By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain superuser privileges The problem occurs due to the ...

/* * Linux kernel ptrace/kmod local root exploit * * This code exploits a race condition in kernel/kmodc, which creates * kernel thread in insecure manner This bug allows to ptrace cloned * process, allowing to take control over privileged modprobe binary * * Should work under all current 22x and 24x kernels * * I discovered this ...

/* source: wwwsecurityfocuscom/bid/7112/info A vulnerability has been discovered in the Linux kernel which can be exploited using the ptrace() system call By attaching to an incorrectly configured root process, during a specific time window, it may be possible for an attacker to gain superuser privileges The problem occurs due to the k ...

/*********************************************** * * Linux Kernel Module Loader Local R00t Exploit * Up to 2420 * By anonymous KuRaK * ************************************************ #include <stdioh> #include <stdlibh> #include <signalh> #include <fcntlh> #incl ...

CVE-2003-0127

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect