PT-2001-2061 · Linux · Linux Kernel

Published 2001-10-18 · Updated 2018-09-20 · CVE-2001-0907

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.2.1 through 2.2.19 Linux kernel versions 2.4.1 through 2.4.10

Description The issue allows local users to cause a denial of service by creating a series of deeply nested symlinks. This causes the kernel to spend extra time when trying to access the link, leading to a denial of service.

Recommendations For Linux kernel versions 2.2.1 through 2.2.19, consider restricting access to the symlink creation functionality to minimize the risk of exploitation. For Linux kernel versions 2.4.1 through 2.4.10, consider implementing measures to limit the depth of nested symlinks to prevent the kernel from spending extra time accessing the links.

Exploit

Fix

Related Identifiers

CVE-2001-0907

Affected Products

Linux Kernel

References · 12

• 🔥 https://exploit-db.com/exploits/21122 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0907 · Security Note
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3 · Vendor Advisory
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079 · Vendor Advisory
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt · Vendor Advisory
• http://linuxsecurity.com/advisories/other_advisory-1650.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2001_036_kernel_txt.html · Vendor Advisory
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01 · Vendor Advisory
• http://iss.net/security_center/static/7312.php · Note
• http://marc.info/?l=bugtraq&m=100350685431610&w=2 · Note
• http://securityfocus.com/bid/3444 · Note
• http://marc.info/?l=bugtraq&m=100343090106914&w=2 · Note