Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0961
HistoryDec 15, 2003 - 5:00 a.m.

CVE-2003-0961

2003-12-1505:00:00
mitre
web.nvd.nist.gov
43
8
cve-2003-0961
integer overflow
do_brk function
linux kernel
root privileges
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

0.4%

JSON

Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.

Affected configurations

Nvd
Node
linuxlinux_kernelRange≤2.4.22
VendorProductVersionCPE
linuxlinux_kernelcpe:/o:linux:linux_kernel::::

References

Social References

More

Related

osv 10
openvas 22
securityvulns 3
debian 17
nessus 14
nvd 1
ubuntucve 1
slackware 2
cvelist 1
cert 1
redhat 2
packetstorm 1
suse 1
osv
osv
kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit
2003-12-01 00:00:00
kernel-patch-2.4.17-mips - integer overflow
2004-02-04 00:00:00
linux-kernel-2.4.18-powerpc+alpha - missing boundary check
2004-01-07 00:00:00
openvas
openvas
Debian Security Advisory DSA 403-1 (kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18)
2008-01-17 00:00:00
Debian Security Advisory DSA 403-1 (kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18)
2008-01-17 00:00:00
Slackware: Security Advisory (SSA:2003-336-01)
2012-09-10 00:00:00
securityvulns
securityvulns
[Full-Disclosure] [iSEC] Linux kernel do_brk() lacks argument bound checking
2003-12-02 00:00:00
[Full-Disclosure] [SECURITY] [DSA-403-1] userland can access Linux kernel memory
2003-12-02 00:00:00
Multiple Remote Issues in Applied Watch IDS Suite (advisory attached)
2003-11-29 00:00:00
debian
debian
[SECURITY] [DSA 433-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)
2004-02-04 06:53:24
[SECURITY] [DSA 433-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)
2004-02-04 06:53:24
[SECURITY] [DSA-403-1] userland can access Linux kernel memory
2003-12-01 20:17:12
nessus
nessus
Debian DSA-403-1 : kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit
2004-09-29 00:00:00
RHEL 2.1 : kernel (RHSA-2003:389)
2004-07-06 00:00:00
SuSE-SA:2003:049: Linux Kernel
2004-07-25 00:00:00
nvd
nvd
CVE-2003-0961
2003-12-15 05:00:00
ubuntucve
ubuntucve
CVE-2003-0961
2003-12-15 00:00:00
slackware
slackware
Kernel security update
2003-12-02 10:05:30
minor advisory typo
2003-12-02 11:21:22
cvelist
cvelist
CVE-2003-0961
2003-12-02 05:00:00
cert
cert
Linux kernel do_brk() function contains integer overflow
2003-12-02 00:00:00
redhat
redhat
(RHSA-2003:389) kernel security update
2003-12-01 00:00:00
(RHSA-2003:368) Updated IA64 kernel packages address security vulnerabilities, bugfixes
2003-12-19 00:00:00
packetstorm
packetstorm
_BSSADV-0000.txt
2003-12-01 00:00:00
suse
suse
local root exploit in Linux Kernel
2003-12-04 15:40:06

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

0.4%

JSON
Related for CVE-2003-0961
osv10openvas22securityvulns3debian17nessus14nvd1ubuntucve1slackware2cvelist1cert1redhat2packetstorm1suse1