PT-2003-1609 · Linux · Linux Kernel

Philippe Biondi · Published 2003-06-18 · Updated 2016-10-18 · CVE-2003-0418

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.0

Description: The issue arises from a miscalculation in the Linux 2.0 kernel's IP stack regarding the size of an ICMP citation. This error results in the inclusion of portions of unauthorized memory in ICMP error responses.

Recommendations: For Linux kernel version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0418

Affected Products

Linux Kernel

References · 4

• 🔥 http://cartel-securite.fr/pbiondi/adv/CARTSA-20030314-icmpleak.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0418 · Security Note
• http://kb.cert.org/vuls/id/471084 · Patch
• http://marc.info/?l=bugtraq&m=105519179005065&w=2 · Note