PT-2001-1036 · Red Hat+1 · Red Hat+1
Published
2001-02-08
·
Updated
2017-10-10
·
CVE-2001-0317
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.2 and 2.4
Red Hat Linux kernel versions 2.2.17
Description
A race condition in the ptrace functionality of the Linux kernel allows local users to gain privileges by tracking and modifying a running setuid process. Multiple vulnerabilities in the kernel packages of Red Hat Linux can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally.
Recommendations
For Linux kernel versions 2.2 and 2.4, consider disabling the ptrace functionality as a temporary workaround until a patch is available.
For Red Hat Linux kernel version 2.2.17, restrict access to the kernel packages to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat