Published: 07/08/2003 Updated: 03/05/2018

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.20.1

A number of vulnerabilities have been discovered in the Linux kernel CAN-2003-0461: /proc/tty/driver/serial in Linux 24x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords This bug has been fixed by restricting access to ...

The IA-64 maintainers fixed several security related bugs in the Linux kernel 2417 used for the IA-64 architecture, mostly by backporting fixes from 2418 The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CAN-2003-0001: Multiple ethernet network interface card (NIC) device ...

/* source: wwwsecurityfocuscom/bid/8002/info A potential information disclosure vulnerability has been reported for the Linux /proc filesystem, specifically when invoking setuid applications As a result, an unprivileged user may be able to read the contents of a setuid application's environment data This could potentially, although unl ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2003-198.html http://www.debian.org/security/2004/dsa-423 http://www.redhat.com/support/errata/RHSA-2003-238.html http://www.debian.org/security/2004/dsa-358 http://www.redhat.com/support/errata/RHSA-2003-239.html http://marc.info/?l=bugtraq&m=105621758104242 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A328 https://nvd.nist.gov https://www.debian.org/security/./dsa-358 https://www.exploit-db.com/exploits/22813/

CVE-2003-0501

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect