CVE & Exploit Intelligence Database

CVE-2002-0046 EPSS 0.01

Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.

Jan 31, 2002

CVE-2001-1551 EPSS 0.00

Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs.

Dec 31, 2001

CVE-2001-1572 EPSS 0.00

The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.

Dec 31, 2001

CVE-2001-0851 EPSS 0.01

Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.

Dec 06, 2001

CVE-2001-0914 EPSS 0.00

Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading.

Nov 21, 2001

CVE-2001-0907 1 PoC Analysis EPSS 0.00

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.

Oct 18, 2001

CVE-2001-1384 1 PoC Analysis EPSS 0.00

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.

Oct 18, 2001

CVE-2001-1056 EPSS 0.01

IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.

Jul 30, 2001

CVE-2001-1244 1 PoC Analysis EPSS 0.17

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Jul 07, 2001

CVE-2001-0405 1 PoC Analysis EPSS 0.14

ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.

Jul 02, 2001

CVE-2001-0316 1 PoC Analysis EPSS 0.00

Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call.

May 03, 2001

CVE-2001-0317 2 PoCs Analysis EPSS 0.00

Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process.

May 03, 2001

CVE-2001-1396 EPSS 0.00

Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.

Apr 17, 2001

CVE-2001-1390 EPSS 0.00

Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.

Apr 17, 2001

CVE-2001-1397 EPSS 0.00

The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory.

Apr 17, 2001

CVE-2001-1398 EPSS 0.01

Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.

Apr 17, 2001

CVE-2001-1395 EPSS 0.00

Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.

Apr 17, 2001

CVE-2001-1399 EPSS 0.00

Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86."

Apr 17, 2001

CVE-2001-1400 EPSS 0.00

Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock).

Apr 17, 2001

CVE-2001-1392 EPSS 0.00

The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers.

Apr 17, 2001