Published: 20/01/2004 Updated: 03/05/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 735

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The mremap system call (do_mremap) in Linux kernel 2.4.x prior to 2.4.21, and possibly other versions prior to 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.4.0
linux linux kernel 2.4.15
linux linux kernel 2.4.16
linux linux kernel 2.4.18
linux linux kernel 2.4.19
linux linux kernel 2.4.21
linux linux kernel 2.4.22
linux linux kernel 2.4.9
linux linux kernel 2.4.1
linux linux kernel 2.4.10
linux linux kernel 2.4.17
linux linux kernel 2.4.2
linux linux kernel 2.4.23
linux linux kernel 2.4.3
linux linux kernel 2.4.13
linux linux kernel 2.4.14
linux linux kernel 2.4.7
linux linux kernel 2.4.8
linux linux kernel 2.4.11
linux linux kernel 2.4.12
linux linux kernel 2.4.20
linux linux kernel 2.4.4
linux linux kernel 2.4.5
linux linux kernel 2.4.6

Several local root exploits have been discovered recently in the Linux kernel This security advisory updates the hppa kernel 2417 for Debian GNU/Linux The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update: CAN-2003-0961: An integer overflow in brk() system call (do_brk() function) ...

Several local root exploits have been discovered recently in the Linux kernel This security advisory updates the mips kernel 2419 for Debian GNU/Linux The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update: CAN-2003-0961: An integer overflow in brk() system call (do_brk() function) ...

Several local root exploits have been discovered recently in the Linux kernel This security advisory updates the PA-RISC kernel 2418 for Debian GNU/Linux The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update: CAN-2003-0961: An integer overflow in brk() system call (do_brk() functi ...

Paul Starzetz discovered a flaw in bounds checking in mremap() in the Linux kernel (present in version 24x and 26x) which may allow a local attacker to gain root privileges Version 22 is not affected by this bug Andrew Morton discovered a missing boundary check for the brk system call which can be used to craft a local root exploit For the ...

The IA-64 maintainers fixed several security related bugs in the Linux kernel 2417 used for the IA-64 architecture, mostly by backporting fixes from 2418 The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CAN-2003-0001: Multiple ethernet network interface card (NIC) device ...

Several security related problems have been fixed in the Linux kernel 2417 used for the S/390 architecture, mostly by backporting fixes from 2418 and incorporating recent security fixes The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project: CVE-2002-0429: The iBCS routines in a ...

Several local root exploits have been discovered recently in the Linux kernel This security advisory updates the PowerPC/Apus kernel for Debian GNU/Linux The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update: CAN-2003-0961: An integer overflow in brk() system call (do_brk() function ...

/* * Linux kernel mremap() bound checking bug exploit * * Bug found by Paul Starzetz <paul isec pl> * * Copyright (c) 2004 iSEC Security Research All Rights Reserved * * THIS PROGRAM IS FOR EDUCATIONAL PURPOSES *ONLY* IT IS PROVIDED "AS IS" * AND WITHOUT ANY WARRANTY COPYING, PRINTING, DISTRIBUTION, MODIFICATION * WITHOUT PERMIS ...

/* * EDB Note: This will just "test" the vulnerability * EDB Note: An exploit version can be found here ~ wwwexploit-dbcom/exploits/145/ */ /* * Proof-of-concept exploit code for do_mremap() * * Copyright (C) 2004 Christophe Devine and Julien Tinnes * * This program is free software; you can redistribute it and/or modify ...

/* * EDB Note: This will just "test" the vulnerability * EDB Note: An exploit version can be found here ~ wwwexploit-dbcom/exploits/145/ */ /* * Proof of concept code for testing do_mremap() Linux kernel bug * It is based on the code by Christophe Devine and Julien Tinnes * posted on Bugtraq mailing list on 5 Jan 2004 but it's ...

CVE-2003-0985

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect