CVE-2003-0462

Severity

12%

Complexity

19%

Confidentiality

48%

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

CVSS 2.0 Base Score 1.2. CVSS Attack Vector: local. CVSS Attack Complexity: high. CVSS Vector: (AV:L/AC:H/Au:N/C:N/I:N/A:P).

Overview

First reported 21 years ago

2003-08-27 04:00:00

Last updated 7 years ago

2017-10-11 01:29:00

Affected Software

MandrakeSoft Mandrake Multi Network Firewall 8.2

8.2

Linux Kernel 2.4.0

2.4.0

Linux Kernel 2.4.1

2.4.1

Linux Kernel 2.4.2

2.4.2

Linux Kernel 2.4.3

2.4.3

Linux Kernel 2.4.4

2.4.4

Linux Kernel 2.4.5

2.4.5

Linux Kernel 2.4.6

2.4.6

Linux Kernel 2.4.7

2.4.7

Linux Kernel 2.4.8

2.4.8

Linux Kernel 2.4.9

2.4.9

Linux Kernel 2.4.10

2.4.10

Linux Kernel 2.4.11

2.4.11

Linux Kernel 2.4.12

2.4.12

Linux Kernel 2.4.13

2.4.13

Linux Kernel 2.4.14

2.4.14

Linux Kernel 2.4.15

2.4.15

Linux Kernel 2.4.16

2.4.16

Linux Kernel 2.4.17

2.4.17

Linux Kernel 2.4.18

2.4.18

Linux Kernel 2.4.19

2.4.19

Linux Kernel 2.4.20

2.4.20

Linux Kernel 2.4.21

2.4.21

MandrakeSoft Mandrake Linux 8.2

8.2

MandrakeSoft Mandrake Linux 9.0

9.0

MandrakeSoft Mandrake Linux Corporate Server 2.1

2.1

References

DSA-358

DSA-423

Patch, Vendor Advisory

RHSA-2003:198

RHSA-2003:238