CVEvulnerability
CVE-2003-0127
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.
Affected configurations
• linux linux kernel 2.2.0
• linux linux kernel 2.2.1
• linux linux kernel 2.2.2
• linux linux kernel 2.2.3
• linux linux kernel 2.2.4
• linux linux kernel 2.2.5
• linux linux kernel 2.2.6
• linux linux kernel 2.2.7
• linux linux kernel 2.2.8
• linux linux kernel 2.2.9
• linux linux kernel 2.2.10
• linux linux kernel 2.2.11
• linux linux kernel 2.2.12
• linux linux kernel 2.2.13
• linux linux kernel 2.2.14
• linux linux kernel 2.2.15
• linux linux kernel 2.2.16
• linux linux kernel 2.2.17
• linux linux kernel 2.2.18
• linux linux kernel 2.2.19
• linux linux kernel 2.2.20
• linux linux kernel 2.2.21
• linux linux kernel 2.2.22
• linux linux kernel 2.2.23
• linux linux kernel 2.2.24
• linux linux kernel 2.4.0
• linux linux kernel 2.4.1
• linux linux kernel 2.4.2
• linux linux kernel 2.4.3
• linux linux kernel 2.4.4
• linux linux kernel 2.4.5
• linux linux kernel 2.4.6
• linux linux kernel 2.4.7
• linux linux kernel 2.4.8
• linux linux kernel 2.4.9
• linux linux kernel 2.4.10
• linux linux kernel 2.4.11
• linux linux kernel 2.4.12
• linux linux kernel 2.4.13
• linux linux kernel 2.4.14
• linux linux kernel 2.4.15
• linux linux kernel 2.4.16
• linux linux kernel 2.4.17
• linux linux kernel 2.4.18
• linux linux kernel 2.4.19
• linux linux kernel 2.4.20
• linux linux kernel 2.4.21
References
- ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-020.0.txt ftp.caldera.com
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=105301461726555&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2003-088.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2003-098.html Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200303-17.xml security.gentoo.org
- http://www.debian.org/security/2003/dsa-270 www.debian.org
- http://www.debian.org/security/2003/dsa-276 www.debian.org
- http://www.debian.org/security/2003/dsa-311 www.debian.org
- http://www.debian.org/security/2003/dsa-312 www.debian.org
- http://www.debian.org/security/2003/dsa-332 www.debian.org
- http://www.debian.org/security/2003/dsa-336 www.debian.org
- http://www.debian.org/security/2004/dsa-423 www.debian.org
- http://www.debian.org/security/2004/dsa-495 www.debian.org
- http://www.kb.cert.org/vuls/id/628849 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:038 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:039 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2003-103.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2003-145.html www.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A254 oval.cisecurity.org
- ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-020.0.txt ftp.caldera.com
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=105301461726555&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2003-088.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2003-098.html Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200303-17.xml security.gentoo.org
- http://www.debian.org/security/2003/dsa-270 www.debian.org
- http://www.debian.org/security/2003/dsa-276 www.debian.org
- http://www.debian.org/security/2003/dsa-311 www.debian.org
- http://www.debian.org/security/2003/dsa-312 www.debian.org
- http://www.debian.org/security/2003/dsa-332 www.debian.org
- http://www.debian.org/security/2003/dsa-336 www.debian.org
- http://www.debian.org/security/2004/dsa-423 www.debian.org
- http://www.debian.org/security/2004/dsa-495 www.debian.org
- http://www.kb.cert.org/vuls/id/628849 Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:038 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:039 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2003-103.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2003-145.html www.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A254 oval.cisecurity.org