PT-2001-1036 · Red Hat+1 · Red Hat+1
Publicado
2001-02-08
·
Atualizado
2017-10-10
·
CVE-2001-0317
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.2 and 2.4
Red Hat Linux kernel versions 2.2.17
Description
A race condition in the ptrace functionality of the Linux kernel allows local users to gain privileges by tracking and modifying a running setuid process. Multiple vulnerabilities in the kernel packages of Red Hat Linux can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.
Recommendations
For Linux kernel versions 2.2 and 2.4, consider disabling the ptrace functionality as a temporary workaround until a patch is available.
For Red Hat Linux kernel version 2.2.17, restrict access to the kernel packages to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat