Lucene search

MitreCVE-2003-0019

HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0019

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve-2003-0019

kernel-utils

red hat linux 8.0

local privilege escalation

network interfaces

setuid privilege

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

Percentile

0.4%

JSON

uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.

Affected configurations

Nvd

Node

redhatlinuxMatch8.0i386

VendorProductVersionCPE
redhatlinux8.0cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	linux	8.0	cpe:2.3:o:redhat:linux:8.0::i386:::::

References

www.ciac.org/ciac/bulletins/n-044.shtml

www.iss.net/security_center/static/11276.php

www.kb.cert.org/vuls/id/134025

www.redhat.com/support/errata/RHSA-2003-056.html

www.securityfocus.com/bid/6801

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2003-0019