CVE-2003-0194

mediumPriorität · verfolgen · 18EPSS 0.004 · 30. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.37% (30th) EPSS

CVSS 4.6 · medium

Is it mine?

16 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-22

tcpdump does not properly drop privileges to the pcap user when starting up.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2003:151
BehobenRed Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2003:151
BehobenRed Hat Enterprise Linux WS version 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2003:151
BehobenRed Hat Linux Advanced Workstation 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2003:151
BehobenRed Hat Linux 7.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
https://access.redhat.com/errata/RHSA-2003:214

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

4.6

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.9–4.6

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 6.4

v2.03.9lowAV:L/AC:L/Au:N/C:P/I:P/A:P/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-250USLLM-abgeleitet

betroffene Produkte (16)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
redhat linux= 7.1nvdUScpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*
redhat linux= 7.2nvdUScpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*
redhat linux= 7.3nvdUScpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*
redhat linux= 8.0nvdUScpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*
redhat linux= 9.0nvdUScpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*
redhat tcpdump= 3.4-39nvdUScpe:2.3:a:redhat:tcpdump:*:*:*:*:*:*:*:*
redhat tcpdump= 3.6.2-12nvdUScpe:2.3:a:redhat:tcpdump:*:*:*:*:*:*:*:*
redhat tcpdump= 3.6.2-9nvdUScpe:2.3:a:redhat:tcpdump:*:*:*:*:*:*:*:*
redhat tcpdump= 3.6.3-3nvdUScpe:2.3:a:redhat:tcpdump:*:*:*:*:*:*:*:*
redhat tcpdump= 3.7.2-1nvdUScpe:2.3:a:redhat:tcpdump:*:*:*:*:*:*:*:*
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::as
Red Hat Enterprise Linux ES version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::es
Red Hat Enterprise Linux WS version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::ws
Red Hat Linux 7.1alle Versionenfixedredhat_csafUScpe:/o:redhat:linux:7.1
Red Hat Linux Advanced Workstation 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::aw

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2003:151Red Hat Security Advisory: tcpdump security update2003-06-09csaf · redhat_csafUS
Updated tcpdump packages that fix an infinite loop vulnerability and drop privileges on startup are now available.
RHSA-2003:214Red Hat Security Advisory: : : : Updated tcpdump packages fix various vulnerabilities2003-06-30csaf · redhat_csafUS
Updated tcpdump, libpcap, and arpwatch packages for iSeries and pSeries fix various vulnerabilities.

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2003-06-09geändert 2026-06-16

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan