CVE-2003-0127

Published: Mar 31, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

Affected (47)

Products: Linux: Linux Kernel

1 product

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.2.0
Linux Linux Kernel	Version 2.2.10
Linux Linux Kernel	Version 2.2.11
Linux Linux Kernel	Version 2.2.12
Linux Linux Kernel	Version 2.2.13
Linux Linux Kernel	Version 2.2.14
Linux Linux Kernel	Version 2.2.15
Linux Linux Kernel	Version 2.2.16
Linux Linux Kernel	Version 2.2.17
Linux Linux Kernel	Version 2.2.18
Linux Linux Kernel	Version 2.2.19
Linux Linux Kernel	Version 2.2.1
Linux Linux Kernel	Version 2.2.20
Linux Linux Kernel	Version 2.2.21
Linux Linux Kernel	Version 2.2.22
Linux Linux Kernel	Version 2.2.23
Linux Linux Kernel	Version 2.2.24
Linux Linux Kernel	Version 2.2.2
Linux Linux Kernel	Version 2.2.3
Linux Linux Kernel	Version 2.2.4
Linux Linux Kernel	Version 2.2.5
Linux Linux Kernel	Version 2.2.6
Linux Linux Kernel	Version 2.2.7
Linux Linux Kernel	Version 2.2.8
Linux Linux Kernel	Version 2.2.9
Linux Linux Kernel	Version 2.4.0
Linux Linux Kernel	Version 2.4.10
Linux Linux Kernel	Version 2.4.11
Linux Linux Kernel	Version 2.4.12
Linux Linux Kernel	Version 2.4.13
Linux Linux Kernel	Version 2.4.14
Linux Linux Kernel	Version 2.4.15
Linux Linux Kernel	Version 2.4.16
Linux Linux Kernel	Version 2.4.17
Linux Linux Kernel	Version 2.4.18
Linux Linux Kernel	Version 2.4.19
Linux Linux Kernel	Version 2.4.1
Linux Linux Kernel	Version 2.4.20
Linux Linux Kernel	Version 2.4.21 pre1
Linux Linux Kernel	Version 2.4.2
Linux Linux Kernel	Version 2.4.3
Linux Linux Kernel	Version 2.4.4
Linux Linux Kernel	Version 2.4.5
Linux Linux Kernel	Version 2.4.6
Linux Linux Kernel	Version 2.4.7
Linux Linux Kernel	Version 2.4.8
Linux Linux Kernel	Version 2.4.9

References (40)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-020.0.txt (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=105301461726555&w=2

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2003-088.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2003-098.html

Source: cve@mitre.org

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200303-17.xml

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-270

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-276

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-311

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-312

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-332

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-336

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-423

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-495

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/628849

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2003:038

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2003:039

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-103.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-145.html

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A254

Source: cve@mitre.org

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-020.0.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=105301461726555&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2003-088.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2003-098.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://security.gentoo.org/glsa/glsa-200303-17.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-270

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-276

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-311

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-312

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-332

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-336

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-423

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-495

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/628849

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2003:038

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2003:039

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-103.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-145.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A254

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.