PT-2002-3156 · Red Hat+1 · Pcmcia-Modules+7

Josh Anderson + 1 · Published 1970-01-01 · Updated 2026-06-07 · CVE-2003-0001

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Linux kernel versions 2.2.24 through 2.4.18 Red Hat Linux kernel-enterprise versions 2.2.24 Red Hat Linux kernel-smp versions 2.2.24 through 2.4.18 Red Hat Linux kernel-iseries version 2.4.18 Red Hat Linux pcmcia-modules version 2.4.18-bf2.4 Debian GNU/Linux pcmcia-modules version 2.4.18-bf2.4 Red Hat Linux kernel-pcmcia-cs version 2.2.24 Red Hat Linux kernel-headers version 2.2.24 Red Hat Linux kernel-source versions 2.2.24 through 2.4.18 Red Hat Linux kernel-utils version 2.2.24 Red Hat Linux kernel-BOOT versions 2.2.24 through 2.4.18 Red Hat Linux kernel-doc versions 2.2.24 through 2.4.18 Red Hat Linux kernel-pseries version 2.4.18 Red Hat Linux iptables version 1.2.5 Red Hat Linux iptables-ipv6 version 1.2.5 Red Hat Linux modutils version 2.4.22 Red Hat Linux modutils-devel version 2.4.22 Red Hat Linux cross-ppc64 (affected versions not specified) Red Hat Linux kernel-bigmem version 2.4.18 Red Hat Linux kernel-debug version 2.4.18 Red Hat Linux kernel-ibcs version 2.2.24 Debian GNU/Linux mkcramfs (affected versions not specified)

Description The issue affects multiple packages in Red Hat Linux and Debian GNU/Linux operating systems, potentially leading to confidentiality, integrity, and availability breaches of protected information. Exploitation can be local or remote, depending on the package. For instance, the vulnerability in ethernet Network Interface Card (NIC) device drivers allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets.

Recommendations For Red Hat Linux kernel versions 2.2.24 through 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-enterprise versions 2.2.24, update to a version that contains a fix for this issue. For Red Hat Linux kernel-smp versions 2.2.24 through 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-iseries version 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux pcmcia-modules version 2.4.18-bf2.4, update to a version that contains a fix for this issue. For Debian GNU/Linux pcmcia-modules version 2.4.18-bf2.4, update to a version that contains a fix for this issue. For Red Hat Linux kernel-pcmcia-cs version 2.2.24, update to a version that contains a fix for this issue. For Red Hat Linux kernel-headers version 2.2.24, update to a version that contains a fix for this issue. For Red Hat Linux kernel-source versions 2.2.24 through 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-utils version 2.2.24, update to a version that contains a fix for this issue. For Red Hat Linux kernel-BOOT versions 2.2.24 through 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-doc versions 2.2.24 through 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-pseries version 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux iptables version 1.2.5, update to a version that contains a fix for this issue. For Red Hat Linux iptables-ipv6 version 1.2.5, update to a version that contains a fix for this issue. For Red Hat Linux modutils version 2.4.22, update to a version that contains a fix for this issue. For Red Hat Linux modutils-devel version 2.4.22, update to a version that contains a fix for this issue. For Red Hat Linux cross-ppc64, at the moment, there is no information about a newer version that contains a fix for this issue. For Red Hat Linux kernel-bigmem version 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-debug version 2.4.18, update to a version that contains a fix for this issue. For Red Hat Linux kernel-ibcs version 2.2.24, update to a version that contains a fix for this issue. For Debian GNU/Linux mkcramfs, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-02820

BDU:2015-03498

BDU:2015-07928

BDU:2015-07930

BDU:2015-07931

BDU:2015-07933

BDU:2015-07934

BDU:2015-07935

BDU:2015-07937

BDU:2015-07938

BDU:2015-07939

BDU:2015-07941

BDU:2015-07942

BDU:2015-07944

BDU:2015-07945

BDU:2015-07947

BDU:2015-07948

BDU:2015-07949

BDU:2015-07950

BDU:2015-07952

BDU:2015-07953

BDU:2015-07955

BDU:2015-07956

BDU:2015-07958

BDU:2015-07962

BDU:2015-07964

CVE-2003-0001

DSA-311

DSA-312

DSA-332

DSA-336

DSA-423

DSA-442

Affected Products

Debian

Linux

Iptables

Iptables-Ipv6

Mkcramfs

Modutils

Modutils-Devel

Pcmcia-Modules

References · 63

• 🔥 https://github.com/marb08/etherleak-checker · Exploit
• 🔥 https://exploit-db.com/exploits/22131 · Exploit
• 🔥 https://exploit-db.com/exploits/26076 · Exploit
• 🔥 https://exploit-db.com/exploits/3555 · Exploit
• https://bdu.fstec.ru/vul/2015-07934 · Security Note
• https://bdu.fstec.ru/vul/2015-07952 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0248 · Security Note
• https://bdu.fstec.ru/vul/2015-03498 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2003-0001 · Security Note
• https://bdu.fstec.ru/vul/2015-07949 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0127 · Security Note
• https://bdu.fstec.ru/vul/2015-07931 · Security Note
• https://bdu.fstec.ru/vul/2015-07964 · Security Note
• https://bdu.fstec.ru/vul/2015-07955 · Security Note
• http://atstake.com/research/advisories/2003/a010603-1.txt · Vendor Advisory