high7.2Public exploit code
CVE-2003-0019
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- UML_NET - Integer Mismanagement Code Execution2003-05-23 · local · linux · Verified
Impact
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Linux | Version 8.0 |
References
- NVD record
- CVE.org record
- http://www.ciac.org/ciac/bulletins/n-044.shtml
- http://www.iss.net/security_center/static/11276.php
- http://www.kb.cert.org/vuls/id/134025
- http://www.redhat.com/support/errata/RHSA-2003-056.html
- http://www.securityfocus.com/bid/6801
- http://www.ciac.org/ciac/bulletins/n-044.shtml
- http://www.iss.net/security_center/static/11276.php
- http://www.kb.cert.org/vuls/id/134025
- http://www.redhat.com/support/errata/RHSA-2003-056.html
- http://www.securityfocus.com/bid/6801