Lucene search

[email protected]CVE-2001-1384

HistoryJul 31, 2002 - 4:00 a.m.

CVE-2001-1384

2002-07-3104:00:00

[email protected]

web.nvd.nist.gov

cve-2001-1384

linux

ptrace

root privileges

setuid

setgid

newgrp

security vulnerability

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.2.0

linuxlinux_kernelMatch2.2.1

linuxlinux_kernelMatch2.2.2

linuxlinux_kernelMatch2.2.3

linuxlinux_kernelMatch2.2.4

linuxlinux_kernelMatch2.2.5

linuxlinux_kernelMatch2.2.6

linuxlinux_kernelMatch2.2.7

linuxlinux_kernelMatch2.2.8

linuxlinux_kernelMatch2.2.9

linuxlinux_kernelMatch2.2.10

linuxlinux_kernelMatch2.2.11

linuxlinux_kernelMatch2.2.12

linuxlinux_kernelMatch2.2.13

linuxlinux_kernelMatch2.2.14

linuxlinux_kernelMatch2.2.15

linuxlinux_kernelMatch2.2.16

linuxlinux_kernelMatch2.2.17

linuxlinux_kernelMatch2.2.18

linuxlinux_kernelMatch2.2.19

linuxlinux_kernelMatch2.4.2

linuxlinux_kernelMatch2.4.3

linuxlinux_kernelMatch2.4.7

linuxlinux_kernelMatch2.4.8

linuxlinux_kernelMatch2.4.9

linuxlinux_kernelMatch2.4.10

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.2.0
linux:linux_kernellinux linux kerneleq2.2.1
linux:linux_kernellinux linux kerneleq2.2.2
linux:linux_kernellinux linux kerneleq2.2.3
linux:linux_kernellinux linux kerneleq2.2.4
linux:linux_kernellinux linux kerneleq2.2.5
linux:linux_kernellinux linux kerneleq2.2.6
linux:linux_kernellinux linux kerneleq2.2.7
linux:linux_kernellinux linux kerneleq2.2.8
linux:linux_kernellinux linux kerneleq2.2.9

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.2.0
linux:linux_kernel	linux linux kernel	eq	2.2.1
linux:linux_kernel	linux linux kernel	eq	2.2.2
linux:linux_kernel	linux linux kernel	eq	2.2.3
linux:linux_kernel	linux linux kernel	eq	2.2.4
linux:linux_kernel	linux linux kernel	eq	2.2.5
linux:linux_kernel	linux linux kernel	eq	2.2.6
linux:linux_kernel	linux linux kernel	eq	2.2.7
linux:linux_kernel	linux linux kernel	eq	2.2.8
linux:linux_kernel	linux linux kernel	eq	2.2.9

Rows per page:

1-10 of 261

References

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt

download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01

marc.info/?l=bugtraq&m=100343090106914&w=2

marc.info/?l=bugtraq&m=100350685431610&w=2

online.securityfocus.com/advisories/3713

www.iss.net/security_center/static/7311.php

www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3

www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3

www.linuxsecurity.com/advisories/other_advisory-1650.html

www.novell.com/linux/security/advisories/2001_036_kernel_txt.html

www.redhat.com/support/errata/RHSA-2001-129.html

www.redhat.com/support/errata/RHSA-2001-130.html

www.securityfocus.com/bid/3447

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-1384

nvd1 cvelist1 nessus2