CVE-2001-1384

Severity

72%

Complexity

39%

Confidentiality

165%

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.

CVSS 2.0 Base Score 7.2. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

Linux Kernel

First reported 23 years ago

2001-10-18 04:00:00

Last updated 8 years ago

2016-10-18 02:14:00

Affected Software

Linux Kernel 2.2

2.2.0

Linux Kernel 2.2.1

2.2.1

Linux Kernel 2.2.2

2.2.2

Linux Kernel 2.2.3

2.2.3

Linux Kernel 2.2.4

2.2.4

Linux Kernel 2.2.5

2.2.5

Linux Kernel 2.2.6

2.2.6

Linux Kernel 2.2.7

2.2.7

Linux Kernel 2.2.8

2.2.8

Linux Kernel 2.2.9

2.2.9

Linux Kernel 2.2.10

2.2.10

Linux Kernel 2.2.11

2.2.11

Linux Kernel 2.2.12

2.2.12

Linux Kernel 2.2.13

2.2.13

Linux Kernel 2.2.14

2.2.14

Linux Kernel 2.2.15

2.2.15

Linux Kernel 2.2.16

2.2.16

Linux Kernel 2.2.17

2.2.17

Linux Kernel 2.2.18

2.2.18

Linux Kernel 2.2.19

2.2.19

Linux Kernel 2.4.2

2.4.2

Linux Kernel 2.4.3

2.4.3

Linux Kernel 2.4.7

2.4.7

Linux Kernel 2.4.8

2.4.8

Linux Kernel 2.4.9

2.4.9

Linux Kernel 2.4.10

2.4.10

References

CSSA-2001-036.0

IMNX-2001-70-035-01

20011018 Flaws in recent Linux kernels

20011019 TSLSA-2001-0028

HPSBTL0112-003

linux-ptrace-race-condition(7311)

Patch, Vendor Advisory

MDKSA-2001:079

MDKSA-2001:082

ESA-20011019-02