Security restrictions bypass in Linux kernel - CVE-2003-0464
Published: August 27, 2003 / Updated: May 3, 2018
Vulnerability identifier: #VU95661
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2003-0464
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to read and manipulate data.
The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd.
Affected software
Linux kernel
How to mitigate CVE-2003-0464
Install update from vendor's repository.