PT-2003-1609 · Linux · Linux Kernel

Philippe Biondi · Publicado 2003-06-18 · Atualizado 2016-10-18 · CVE-2003-0418

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.0

Description: The issue arises from a miscalculation in the Linux 2.0 kernel's IP stack regarding the size of an ICMP citation. This error results in the inclusion of portions of unauthorized memory in ICMP error responses.

Recommendations: For Linux kernel version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-0418

Produtos afetados

Linux Kernel

Referências · 4

• 🔥 http://cartel-securite.fr/pbiondi/adv/CARTSA-20030314-icmpleak.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0418 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=105519179005065&w=2 · Nota
• http://kb.cert.org/vuls/id/471084 · Correção