PT-2001-2636 · Linux · Linux Kernel

Publicado 2001-12-31 · Atualizado 2008-09-05 · CVE-2001-1551

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.2.19

Description The issue allows local users to exceed disk quota restrictions during the execution of setuid programs because the Linux kernel enables CAP SYS RESOURCE for setuid processes.

Recommendations For Linux kernel version 2.2.19, consider disabling the setuid bit for programs that do not require it to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1551

Produtos afetados

Linux Kernel

Referências · 2

• http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1551 · Nota de Segurança