Linux Kernel Ptrace Privilege Escalation Vulnerability - Advisories

Linux Kernel Ptrace Privilege Escalation Vulnerability

Secunia Advisory:	SA8337
Release Date:	2003-03-19
Last Update:	2004-04-19

Critical:	Less critical
Impact:	Privilege escalation
Where:	Local system
Solution Status:	Vendor Patch

OS:	Linux Kernel 2.2.x Linux Kernel 2.4.x


CVE reference:	CVE-2003-0127 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been identified in version 2.2.x and 2.4.x of the Linux kernel. The vulnerability is caused by an error in ptrace and can be exploited by malicious, local users to escalate their privileges to "root" on a vulnerable system. Solution: Linux kernel 2.2.25 has been released: http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.25.bz2 An new version of the 2.4 kernel has not been released yet. Provided and/or discovered by: Andrzej Szombierski Changelog: 2004-04-19: Added link to US-CERT vulnerability note. Other References: http://linuxtoday.com/news_story.php3?ltsn=2003-03-18-001-26-SC-KN-SW US-CERT VU#628849: http://www.kb.cert.org/vuls/id/628849



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

78 Related Secunia Security Advisories, displaying 10

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	HP OpenView Select Identity Connectors Information Disclosure

2.	rPath update for libtiff

3.	Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

4.	Gentoo update for realplayer

5.	Gentoo update for yelp

6.	Gentoo update for dnsmasq

7.	Gentoo update for mysql

8.	Cisco Secure ACS EAP Packet Denial of Service

9.	SUSE update for IBMJava5-JRE and java-1_5_0-ibm

10.	IBM AIX "swcons" Command Privilege Escalation Vulnerability