CVE-2003-0476 | BDVDB-2026-5615 Detail
Description#
The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A327
- http://marc.info/?l=bugtraq&m=105664924024009&w=2
- http://www.redhat.com/support/errata/RHSA-2003-238.html
- http://www.debian.org/security/2004/dsa-423
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:074
- http://www.redhat.com/support/errata/RHSA-2003-408.html
- http://www.debian.org/security/2004/dsa-358
- http://www.redhat.com/support/errata/RHSA-2003-368.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.