Lucene search

[email protected]CVE-2001-1384

HistoryOct 18, 2001 - 4:00 a.m.

CVE-2001-1384

2001-10-1804:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-1384

linux

ptrace

root privileges

setuid

setgid

newgrp

security vulnerability

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.2.10
linux:linux_kernellinux linux kerneleq2.2.13
linux:linux_kernellinux linux kerneleq2.2.0
linux:linux_kernellinux linux kerneleq2.2.6
linux:linux_kernellinux linux kerneleq2.2.18
linux:linux_kernellinux linux kerneleq2.2.3
linux:linux_kernellinux linux kerneleq2.2.2
linux:linux_kernellinux linux kerneleq2.2.5
linux:linux_kernellinux linux kerneleq2.4.7
linux:linux_kernellinux linux kerneleq2.2.8

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.2.10
linux:linux_kernel	linux linux kernel	eq	2.2.13
linux:linux_kernel	linux linux kernel	eq	2.2.0
linux:linux_kernel	linux linux kernel	eq	2.2.6
linux:linux_kernel	linux linux kernel	eq	2.2.18
linux:linux_kernel	linux linux kernel	eq	2.2.3
linux:linux_kernel	linux linux kernel	eq	2.2.2
linux:linux_kernel	linux linux kernel	eq	2.2.5
linux:linux_kernel	linux linux kernel	eq	2.4.7
linux:linux_kernel	linux linux kernel	eq	2.2.8

Rows per page:

1-10 of 261

References

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt

download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01

marc.info/?l=bugtraq&m=100343090106914&w=2

marc.info/?l=bugtraq&m=100350685431610&w=2

online.securityfocus.com/advisories/3713

www.iss.net/security_center/static/7311.php

www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3

www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3

www.linuxsecurity.com/advisories/other_advisory-1650.html

www.novell.com/linux/security/advisories/2001_036_kernel_txt.html

www.redhat.com/support/errata/RHSA-2001-129.html

www.redhat.com/support/errata/RHSA-2001-130.html

www.securityfocus.com/bid/3447

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-1384

nessus2