CVE-2003-0461

Published: Aug 27, 2003Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.

Affected (5)

Products: Redhat: Linux

Redhat

1 product

Linux

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Linux	Version 7.1
Redhat Linux	Version 7.2
Redhat Linux	Version 7.3
Redhat Linux	Version 8.0
Redhat Linux	Version 9.0

References (16)

http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-358

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-423

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2003-238.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2004-188.html

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9330

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A997

Source: cve@mitre.org

http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html