vulnwire
7.2high

CVE-2003-01274 exploits

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 75%
Public exploits
4
Exploit-DB

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

Exploit prediction (EPSS)

1.57% probability of exploitation in the next 30 days, higher than 75% of all scored CVEs.

Exploits and detections

  • EDB-3 Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation · local · 2003-03-30
  • EDB-22363 Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (2) · local · 2003-04-10
  • EDB-22362 Linux Kernel 2.2.x/2.4.x - Privileged Process Hijacking Privilege Escalation (1) · local · 2003-03-17
  • EDB-12 Linux Kernel < 2.4.20 - Module Loader Privilege Escalation · local · 2003-04-14

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Technology feeds
Linux kernel (RSS, critical only)

References

  • redhat.com /support/errata/RHSA-2003-103.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2003-088.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • debian.org /security/2003/dsa-270 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • debian.org /security/2004/dsa-423 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • rhn.redhat.com /errata/RHSA-2003-098.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • debian.org /security/2003/dsa-336 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • debian.org /security/2003/dsa-276 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • marc.info /?l=bugtraq&m=105301461726555&w=2 · vendor-advisory, x_refsource_ENGARDE, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2003:039 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • debian.org /security/2004/dsa-495 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • security.gentoo.org /glsa/glsa-200303-17.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • debian.org /security/2003/dsa-311 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • debian.org /security/2003/dsa-332 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • archives.neohapsis.com /archives/vulnwatch/2003-q1/0134.html · mailing-list, x_refsource_VULNWATCH, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A254 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • redhat.com /support/errata/RHSA-2003-145.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2003:038 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • debian.org /security/2003/dsa-312 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • kb.cert.org /vuls/id/628849 · third-party-advisory, x_refsource_CERT-VN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.