PT-2002-2684 · Linux · Linux Kernel

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1963

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.1 through 2.4.19

Description The issue allows local users to cause a denial of service, specifically resource exhaustion, by opening a certain number of setuid binaries. This occurs because the Linux kernel sets a limit of 10 files for root's NR RESERVED FILES, which can be exhausted by opening 10 setuid binaries.

Recommendations For Linux kernel versions 2.4.1 through 2.4.19, consider restricting access to setuid binaries to minimize the risk of exploitation. As a temporary workaround, limit the number of setuid binaries that can be opened by a local user to prevent resource exhaustion.

Exploit

Correção

Identificadores relacionados

CVE-2002-1963

Produtos afetados

Linux Kernel

Referências · 5

• 🔥 http://securityfocus.com/bid/5178 · Exploit
• http://online.securityfocus.com/archive/1/281100 · Nota
• http://securityfocus.com/archive/1/281359 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1963 · Nota de Segurança
• http://iss.net/security_center/static/9515.php · Nota