high7.2Public exploit code
CVE-2003-0961
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.4.22 - 'do_brk()' Local Privilege Escalation (2)2003-12-05 · local · linux · Verified
- Linux Kernel 2.4.22 - 'do_brk()' Local Privilege Escalation (1)2003-12-02 · local · linux · Verified
Impact
Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | through 2.4.22 |
References
- NVD record
- CVE.org record
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000796
- http://isec.pl/papers/linux_kernel_do_brk.pdf
- http://marc.info/?l=bugtraq&m=107064798706473&w=2
- http://marc.info/?l=bugtraq&m=107064830206816&w=2
- http://marc.info/?l=bugtraq&m=107394143105081&w=2
- http://secunia.com/advisories/10328
- http://secunia.com/advisories/10329
- http://secunia.com/advisories/10330
- http://secunia.com/advisories/10333
- http://secunia.com/advisories/10338
- http://www.debian.org/security/2003/dsa-403
- http://www.debian.org/security/2004/dsa-417
- http://www.debian.org/security/2004/dsa-423
- http://www.debian.org/security/2004/dsa-433
- http://www.debian.org/security/2004/dsa-439
- http://www.debian.org/security/2004/dsa-440
- http://www.debian.org/security/2004/dsa-442
- http://www.debian.org/security/2004/dsa-450
- http://www.debian.org/security/2004/dsa-470
- http://www.debian.org/security/2004/dsa-475
- http://www.kb.cert.org/vuls/id/301156
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:110
- http://www.novell.com/linux/security/advisories/2003_049_kernel.html
- http://www.redhat.com/support/errata/RHSA-2003-368.html
- http://www.redhat.com/support/errata/RHSA-2003-389.html