PT-2003-2233 · Linux · Linux Kernel+1

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1288

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux-VServer version 1.22 with Linux kernel version 2.4.23

Description The issue is related to multiple race conditions in Linux-VServer with Linux kernel, allowing local users to cause a denial of service via unknown attack vectors. These vectors are related to the s info and ip info data structures and the functions forget original parent, goodness, schedule, update process times, and vc new s context.

Recommendations For Linux-VServer version 1.22 with Linux kernel version 2.4.23, consider restricting access to the affected functions until a patch is available. As a temporary workaround, disabling the schedule function may help minimize the risk of exploitation. However, this may have significant performance implications and should be carefully considered. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2003-1288

Produtos afetados

Linux Kernel

Linux-Vserver

Referências · 6

• 🔥 http://list.linux-vserver.org/archive/vserver/msg05631.html · Exploit
• http://list.linux-vserver.org/archive/vserver/msg05658.html · Nota
• http://linux-vserver.org/ChangeLog · Nota
• http://osvdb.org/7587 · Correção
• http://list.linux-vserver.org/archive/vserver/msg05630.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1288 · Nota de Segurança