Secunia

Multiple vulnerabilities has been identified in the Linux Kernel.

1) A local user can see the exact character count transmitted over a serial link. This can be exploited to see the length of password and to learn the inter-keystroke timings. This can be seen in "/proc/tty/driver/serial".

2) A race condition in the "execve()" system call, for more information see:
http://secunia.com/advisories/9154/

3) Normal users could bind to certain UDP ports due to an error in the RPC code.

4) The "execve()" system call stores file descriptors in the file table of the calling process. This allows local users to see restricted file descriptors.

5) Users are able to open entries in "/proc/self". This could cause setuid programs to fail changing ownership and permissions of already opened entries.

6) STP could allow malicious people to alter the bridge topology.

7) STP fails to check the length of data properly. This could lead to a Denial of Service.

8) It is possible to corrupt the forwarding table by sending forged packets (no further details are available).

9+10) Two security issues in the C-Media PCI sound driver result in userspace being accessed insecurely.

Solution
Update to version 2.4.29.
Further details available in Customer Area

Provided and/or discovered by
Paul Starzetz
Jerry Kreuscher

Changelog
Further details available in Customer Area

Original Advisory
https://rhn.redhat.com/errata/RHSA-2003-238.html

Deep Links
Links available in Customer Area