Lucene search
HistoryAug 27, 2003 - 4:00 a.m.
CVE-2003-0462
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:N/I:N/A:P
AI Score
6
Confidence
High
EPSS
0
Percentile
9.7%
A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).
Affected configurations
Node
mandrakesoftmandrake_multi_network_firewallMatch8.2
Node
linuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.2
ORlinuxlinux_kernelMatch2.4.3
ORlinuxlinux_kernelMatch2.4.4
ORlinuxlinux_kernelMatch2.4.5
ORlinuxlinux_kernelMatch2.4.6
ORlinuxlinux_kernelMatch2.4.7
ORlinuxlinux_kernelMatch2.4.8
ORlinuxlinux_kernelMatch2.4.9
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
ORlinuxlinux_kernelMatch2.4.19
ORlinuxlinux_kernelMatch2.4.20
ORlinuxlinux_kernelMatch2.4.21
ORmandrakesoftmandrake_linuxMatch8.2
ORmandrakesoftmandrake_linuxMatch8.2ppc
ORmandrakesoftmandrake_linuxMatch9.0
ORmandrakesoftmandrake_linux_corporate_serverMatch2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mandrakesoft | mandrake_multi_network_firewall | 8.2 | cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.0 | cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.1 | cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.2 | cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.3 | cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.4 | cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.5 | cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.6 | cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.7 | cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.4.8 | cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:* |
References
Related
ubuntucve
ubuntucve
CVE-2003-0462
2003-08-27 00:00:00
cve
cve
CVE-2003-0462
2003-08-27 04:00:00
cvelist
cvelist
CVE-2003-0462
2003-07-25 04:00:00
exploitdb
exploitdb
nessus
nessus
Mandrake Linux Security Advisory : kernel (MDKSA-2003:066-2)
2004-07-31 00:00:00
RHEL 2.1 : kernel (RHSA-2003:239)
2004-07-06 00:00:00
Mandrake Linux Security Advisory : kernel (MDKSA-2003:074)
2004-07-31 00:00:00
redhat
redhat
(RHSA-2003:239) kernel security update
2003-08-21 00:00:00
(RHSA-2003:198) kernel security update
2003-08-21 00:00:00
securityvulns
securityvulns
[RHSA-2003:238-01] Updated 2.4 kernel fixes vulnerabilities
2003-07-22 00:00:00
openvas
openvas
Debian Security Advisory DSA 358-1 (linux-kernel-i386, linux-kernel-alpha)
2008-01-17 00:00:00
Debian Security Advisory DSA 358-1 (linux-kernel-i386, linux-kernel-alpha)
2008-01-17 00:00:00
Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)
2008-01-17 00:00:00
osv
osv
linux-kernel-2.4.18 - several vulnerabilities
2003-07-31 00:00:00
linux-kernel-2.4.17-ia64 - several vulnerabilities
2004-01-15 00:00:00
debian
debian
[SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64)
2004-01-15 07:49:42
[SECURITY] [DSA-358-1] New kernel source and i386, alpha kernel images fix multiple vulnerabilities
2003-08-01 01:57:30
[SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64)
2004-01-15 07:49:42
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:N/I:N/A:P
AI Score
6
Confidence
High
EPSS
0
Percentile
9.7%
Related for NVD:CVE-2003-0462