Published: 27/08/2003 Updated: 11/10/2017

CVSS v2 Base Score: 1.2 | Impact Score: 2.9 | Exploitability Score: 1.9

VMScore: 125

Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

Vulnerable Product	Search on Vulmon	Subscribe to Product
mandrakesoft mandrake multi network firewall 8.2
linux linux kernel 2.4.1
linux linux kernel 2.4.10
linux linux kernel 2.4.13
linux linux kernel 2.4.14
linux linux kernel 2.4.20
linux linux kernel 2.4.21
linux linux kernel 2.4.9
mandrakesoft mandrake linux 8.2
linux linux kernel 2.4.11
linux linux kernel 2.4.12
linux linux kernel 2.4.19
linux linux kernel 2.4.2
linux linux kernel 2.4.7
linux linux kernel 2.4.8
linux linux kernel 2.4.17
linux linux kernel 2.4.18
linux linux kernel 2.4.5
linux linux kernel 2.4.6
linux linux kernel 2.4.0
linux linux kernel 2.4.15
linux linux kernel 2.4.16
linux linux kernel 2.4.3
linux linux kernel 2.4.4
mandrakesoft mandrake linux 9.0
mandrakesoft mandrake linux corporate server 2.1

A number of vulnerabilities have been discovered in the Linux kernel CAN-2003-0461: /proc/tty/driver/serial in Linux 24x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords This bug has been fixed by restricting access to ...

The IA-64 maintainers fixed several security related bugs in the Linux kernel 2417 used for the IA-64 architecture, mostly by backporting fixes from 2418 The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CAN-2003-0001: Multiple ethernet network interface card (NIC) device ...

/* source: wwwsecurityfocuscom/bid/8042/info A race condition vulnerability has been discovered in the Linux execve() system call, affecting the 24 kernel tree The problem lies in the atomicity of placing a target executables file descriptor within the current process descriptor and executing the file An attacker could potentially exp ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2003-238.html http://www.debian.org/security/2004/dsa-423 http://www.redhat.com/support/errata/RHSA-2003-198.html http://www.debian.org/security/2004/dsa-358 http://www.redhat.com/support/errata/RHSA-2003-239.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A309 https://nvd.nist.gov https://www.debian.org/security/./dsa-358 https://www.exploit-db.com/exploits/22840/

CVE-2003-0462

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect