PT-2001-2636 · Linux · Linux Kernel

Published 2001-12-31 · Updated 2008-09-05 · CVE-2001-1551

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.2.19

Description The issue allows local users to exceed disk quota restrictions during the execution of setuid programs because the Linux kernel enables CAP SYS RESOURCE for setuid processes.

Recommendations For Linux kernel version 2.2.19, consider disabling the setuid bit for programs that do not require it to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1551

Affected Products

Linux Kernel

References · 2

• http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1551 · Security Note