CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2003-0501 – Linux Kernel 2.2.x/2.4.x - '/proc' Filesystem Information Disclosure
https://notcve.org/view.php?id=CVE-2003-0501
04 Jul 2003 — The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries. El sistema de ficheros /proc de Linux permite a usuarios locales obtener información sensible abriendo varias entradas en /proc/self antes de ejecutar algún programa con setuid, lo que hace que el programa no consiga cambiar al propietario y los permisos de ese fi... • https://www.exploit-db.com/exploits/22813 •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2003-0476
https://notcve.org/view.php?id=CVE-2003-0476
28 Jun 2003 — The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors. La llamada del sistema execve en Linux 2.4.x registra el descriptor de fichero del proceso ejecutable en la tabla de ficheros del proceso llamante, lo que permite a usuarios locales ganar acceso de lectrura a descriptores de fichero restringidos. • http://marc.info/?l=bugtraq&m=105664924024009&w=2 •
CVSS: 7.5EPSS: 0%CPEs: 40EXPL: 1CVE-2003-0418
https://notcve.org/view.php?id=CVE-2003-0418
18 Jun 2003 — The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses. La pila IP del kernel de Linux 2.0 no calcula adecuadamente el tamaño de una petición ICMP, lo que hace que incluya porciones de memoria no autorizada en respuestas de error ICMP. • http://marc.info/?l=bugtraq&m=105519179005065&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 91EXPL: 0CVE-2003-0246
https://notcve.org/view.php?id=CVE-2003-0246
15 May 2003 — The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports. La llamada al sistema ioperm en los Kernels de Linux anteriores al 2.4.20 no restringe apropiadamente los privilegios, lo que permite que usuarios locales obtengan permisos de lectura o escritura sobre ciertos puertos. • http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0076.html •
CVSS: 7.5EPSS: 12%CPEs: 1EXPL: 0CVE-2003-0244
https://notcve.org/view.php?id=CVE-2003-0244
08 May 2003 — The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions. La implementación de la caché de ruta en Linux 2.4 y el módulo Netfilter IP conntrack permite que atacantes remotos provoquen una denegación de servicio (agotamiento de CPU) mediante paquetes con una dirección fuente alterada (lo que causa un elevado número de col... • http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0073.html •
CVSS: 7.8EPSS: 0%CPEs: 47EXPL: 4CVE-2003-0127 – Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2003-0127
18 Mar 2003 — The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel. • https://www.exploit-db.com/exploits/3 •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2003-0018
https://notcve.org/view.php?id=CVE-2003-0018
19 Feb 2003 — Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption. Linux kernel 2.4.10 y versiones posteriores incluyendo 2.4.18, no maneja adecuadamente la característica O_REDIRECT, lo que permite a atacantes locales con privilegios de escritura leer porciones de ficheros previamente borrados, o producir corrupción en el sistema de ficheros. • http://linux.bkbits.net:8080/linux-2.4/cset%403e2f193drGJDBg9SG6JwaDQwCBnAMQ •
CVSS: 5.3EPSS: 25%CPEs: 37EXPL: 5CVE-2003-0001 – Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure
https://notcve.org/view.php?id=CVE-2003-0001
08 Jan 2003 — Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak. Múltiples controladores de dispositivo (device drivers) de Tarjetas de Interfaz de Red (Network Interface Card - NIC) Ethernet no rellenan las tramas con bytes nulos, lo que permite a atacantes remotos obtener información de paquetes anteriores o memoria del kernel ... • https://packetstorm.news/files/id/121969 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 25EXPL: 1CVE-2002-1963
https://notcve.org/view.php?id=CVE-2002-1963
31 Dec 2002 — Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries. • http://online.securityfocus.com/archive/1/281100 •
CVSS: 10.0EPSS: 0%CPEs: 47EXPL: 0CVE-2002-1572
https://notcve.org/view.php?id=CVE-2002-1572
31 Dec 2002 — Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors. • http://linux.bkbits.net:8080/linux-2.4/cset%403d6badc0mxsPaOTT_GuPVxCp1_ormw •