PT-2003-1093 · Red Hat · Red Hat Linux Kernel
Paul Starzetz
·
Published
2003-05-22
·
Updated
2018-05-03
·
CVE-2003-0501
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Red Hat Linux kernel versions 2.4.20
Description
The issue concerns multiple vulnerabilities in the Red Hat Linux kernel package, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Additionally, the /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program.
Recommendations
For Red Hat Linux kernel version 2.4.20, consider updating to a newer version that contains a fix for this issue. As a temporary workaround, restrict access to sensitive information and limit the execution of setuid programs to minimize the risk of exploitation. Avoid using the /proc filesystem to obtain sensitive information until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Red Hat Linux Kernel