PT-2003-1091 · Linux · Linux Kernel
Published
2003-05-22
·
Updated
2018-05-03
·
CVE-2003-0464
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 2.4.20
Description
The issue affects the Linux kernel, specifically version 2.4.20, and can lead to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited remotely. The RPC code in the Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services.
Recommendations
For Linux kernel version 2.4.20, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict access to privileged services such as nfsd to minimize the risk of exploitation. Avoid using UDP ports that are used by privileged services until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel