PT-2002-3157 · Linux+1 · Linux+3

Dan S. Wallach

+1

·

Publicado

1970-01-01

·

Atualizado

2017-10-11

·

CVE-2003-0244

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.18 through 2.4.20 kernel-smp-2.4.20 kernel-iseries-2.4.18 iptables-1.2.5 modutils-devel-2.4.22 modutils-2.4.22 mkcramfs kernel-source-2.4.18 kernel-source-2.4.20 kernel-doc-2.4.18 kernel-doc-2.4.20 kernel-2.4.18 kernel-2.4.20 kernel-BOOT-2.4.20 iptables-ipv6-1.2.5 kernel-pseries-2.4.18 kernel-bigmem-2.4.20 cross-ppc64 pcmcia-modules-2.4.18-bf2.4
Description The issue affects multiple packages in the Linux operating system, including the kernel and various utilities. Exploitation of these vulnerabilities can lead to disruption of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely or locally, depending on the specific package and version. The route cache implementation in Linux 2.4 and the Netfilter IP conntrack module are also affected, allowing remote attackers to cause a denial of service via packets with forged source addresses.
Recommendations For Linux kernel versions 2.4.18 through 2.4.20, update to a newer version to mitigate the risk. For kernel-smp-2.4.20, kernel-iseries-2.4.18, iptables-1.2.5, modutils-devel-2.4.22, modutils-2.4.22, mkcramfs, kernel-source-2.4.18, kernel-source-2.4.20, kernel-doc-2.4.18, kernel-doc-2.4.20, kernel-2.4.18, kernel-2.4.20, kernel-BOOT-2.4.20, iptables-ipv6-1.2.5, kernel-pseries-2.4.18, kernel-bigmem-2.4.20, and cross-ppc64, restrict access to minimize the risk of exploitation until a patch is available. For pcmcia-modules-2.4.18-bf2.4, consider disabling the module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability for some of the affected packages.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-02820
BDU:2015-03498
BDU:2015-07928
BDU:2015-07930
BDU:2015-07931
BDU:2015-07934
BDU:2015-07942
BDU:2015-07948
BDU:2015-07950
BDU:2015-07956
BDU:2015-07962
BDU:2015-07964
BDU:2015-07979
BDU:2015-08108
BDU:2015-08110
BDU:2015-08112
BDU:2015-08116
BDU:2015-08126
BDU:2015-08129
CVE-2003-0244
DSA-311
DSA-312
DSA-332
DSA-336
DSA-442

Produtos afetados

Linux
Netfilter Ip Conntrack
Iptables
Modutils