PT-2003-2233 · Linux · Linux Kernel+1

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1288

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux-VServer version 1.22 with Linux kernel version 2.4.23

Description The issue is related to multiple race conditions in Linux-VServer with Linux kernel, allowing local users to cause a denial of service via unknown attack vectors. These vectors are related to the s info and ip info data structures and the functions forget original parent, goodness, schedule, update process times, and vc new s context.

Recommendations For Linux-VServer version 1.22 with Linux kernel version 2.4.23, consider restricting access to the affected functions until a patch is available. As a temporary workaround, disabling the schedule function may help minimize the risk of exploitation. However, this may have significant performance implications and should be carefully considered. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2003-1288

Affected Products

Linux Kernel

Linux-Vserver

References · 6

• 🔥 http://list.linux-vserver.org/archive/vserver/msg05631.html · Exploit
• http://osvdb.org/7587 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1288 · Security Note
• http://list.linux-vserver.org/archive/vserver/msg05658.html · Note
• http://linux-vserver.org/ChangeLog · Note
• http://list.linux-vserver.org/archive/vserver/msg05630.html · Note