PT-2003-1091 · Linux · Linux Kernel
Publicado
2003-05-22
·
Atualizado
2018-05-03
·
CVE-2003-0464
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 2.4.20
Description
The issue affects the Linux kernel, specifically version 2.4.20, and can lead to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely. The RPC code in the Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services.
Recommendations
For Linux kernel version 2.4.20, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict access to privileged services such as nfsd to minimize the risk of exploitation. Avoid using UDP ports that are used by privileged services until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel