SB2004021702 - Security restrictions bypass in Linux kernel
Published: February 17, 2004
Security Bulletin ID
SB2004021702
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security restrictions bypass (CVE-ID: CVE-2004-0001)
The vulnerability allows a local user to execute arbitrary code.
Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.
Remediation
Install update from vendor's website.
References
- http://security.gentoo.org/glsa/glsa-200402-06.xml
- http://www.kb.cert.org/vuls/id/337238
- http://www.redhat.com/support/errata/RHSA-2004-017.html
- http://www.securityfocus.com/bid/9429
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14888
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A868