CVE-2003-0127
highPriorität · verfolgen · 40EPSS 0.016 · 75. PerzentilExploit · funktionalEURUUSEPSS · bewertet 2026-10-26
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat Linux 6.2redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/kernel-upgrade.html Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:088 - BehobenRed Hat Linux 7.0redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/kernel-upgrade.html Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:088 - BehobenRed Hat Linux 7.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:098 - BehobenRed Hat Linux 7.2redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:098 - BehobenRed Hat Linux 7.3redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:098 - BehobenRed Hat Linux 8.0redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:098 - BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:103 - BehobenRed Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:103 - BehobenRed Hat Enterprise Linux WS version 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:103 - BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206 respectively. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:145 - BehobenRed Hat Linux Advanced Workstation 2.1redhat_csaf
Release notes, driver notes, and driver disks for this update are available at the following URL: http://www.redhat.com/support/errata/rhel/ Before applying this update, make sure all previously released errata relevant to your system have been applied, especially the additional packages from RHSA-2002:205 and RHSA-2002:206 respectively. The procedure for upgrading the kernel manually is documented at: http://www.redhat.com/support/docs/howto/kernel-upgrade/ Please read the directions for your architecture carefully before proceeding with the kernel upgrade. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:145 - BehobenRed Hat Linux 7.1redhat_csaf
NOTE: Installing the kernel rpms does not automatically prepare the system to boot the new kernel. Refer to the Problem Description section for specific instructions. Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is also available via Red Hat Network. Many people find this to be an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Note that you need to select the kernel explicitly on default configurations of up2date.
https://access.redhat.com/errata/RHSA-2003:190
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.2–10
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (5)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- EDB-12Linux Kernel < 2.4.20 - Module Loader Privilege Escalationfunktional · exploit_db
- EDB-22362Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (1)funktional · exploit_db
- EDB-22363Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2)funktional · exploit_db
- EDB-3Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalationfunktional · exploit_db
betroffene Produkte (69)
Betroffene Produkte und Versionsbereiche.
Advisories (5)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2003:088Red Hat Security Advisory: : New kernel 2.2 packages fix vulnerabilities2003-03-20csaf · redhat_csafUS
Updated kernel packages for Red Hat Linux 6.2 and 7.0 are now available that fix several security vulnerabilities.
- RHSA-2003:098Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerability2003-03-17csaf · redhat_csafUS
Updated kernel packages for Red Hat Linux 7.1, 7.2, 7.3, and 8.0 are now available. These packages fix a ptrace-related vulnerability that can lead to elevated (root) privileges. [Updated 30 March 2003] Updated kernel packages for Red Hat Linux 7.2 ia64 have been added. [Updated 28 May 2003] Replacement kernel packages for Red Hat Linux 7.2 ia64 have been added; the previous packages did not contain the fix for the ptrace vulnerability.
- RHSA-2003:103Red Hat Security Advisory: kernel security update2003-03-21csaf · redhat_csafUS
Updated kernel packages are now available that fix a ptrace-related vulnerability which can lead to elevated (root) privileges.
- RHSA-2003:145Red Hat Security Advisory: Updated kernel fixes security vulnerabilities and updates drivers2003-05-27csaf · redhat_csafUS
These updated kernel packages address security vulnerabilites, including a potential data corruption scenario. In addition, a number of drivers have been updated, bugs have been resolved, and support for the IBM x450 platform and the Madison processor have been added.
- RHSA-2003:190Red Hat Security Advisory: : : : Updated 2.4 kernel for pSeries and iSeries fixes vulnerabilities2003-06-25csaf · redhat_csafUS
Updated kernel packages, based on the 2.4.18 kernel, are now available for Red Hat Linux 7.1 for iSeries and pSeries systems. Please see the NOTE at the end of the description for important information about booting the new kernel on your system.
auch bekannt als (20)
Weitere Namen und Kennungen dieser Entität.
- EUVD-2003-0123enisa_euvd
- BDU:2015-01775fstec_bdu
- BDU:2015-01776fstec_bdu
- BDU:2015-01777fstec_bdu
- BDU:2015-01778fstec_bdu
- BDU:2015-01779fstec_bdu
- BDU:2015-01780fstec_bdu
- BDU:2015-01781fstec_bdu
- BDU:2015-04792fstec_bdu
- BDU:2015-08108fstec_bdu
- BDU:2015-08110fstec_bdu
- BDU:2015-08112fstec_bdu
- BDU:2015-08116fstec_bdu
- BDU:2015-08126fstec_bdu
- BDU:2015-08129fstec_bdu
- DSA-495fstec_bdu
- RHSA-2003-187fstec_bdu
- SUSE-SA:2003:021fstec_bdu
- GHSA-jhjp-mfjv-rvhxenisa_euvd
- ID:1400278fstec_bdu
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (38)
Externe Belege — Patches, Meldungen, Analysen.
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.htmlenisa_euvd
- http://marc.info/?l=bugtraq&m=105301461726555&w=2enisa_euvd
- http://rhn.redhat.com/errata/RHSA-2003-088.htmlenisa_euvd
- http://rhn.redhat.com/errata/RHSA-2003-098.htmlenisa_euvd
- http://security.gentoo.org/glsa/glsa-200303-17.xmlenisa_euvd
- http://www.debian.org/security/2003/dsa-270enisa_euvd
- http://www.debian.org/security/2003/dsa-276enisa_euvd
- http://www.debian.org/security/2003/dsa-311enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan