CVE-2003-0246

Linux kernel <2.4.20 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2003-147.html
Various Sources vendor-advisory x_refsource_turbo
http://www.turbolinux.com/security/TLSA-2003-41.txt
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2003:074
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-336
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2003:066
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2003-172.html
Mailing List vendor-advisory x_refsource_engarde
http://marc.info/?l=bugtraq&m=105301461726555&w=2
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-311
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-332
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2003/dsa-312
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-442
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0076.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A278

Scores

EPSS 0.0050
EPSS Percentile 40.4%

Details

Status published
Products (50)
linux/linux_kernel 2.4.0
linux/linux_kernel 2.4.1
linux/linux_kernel 2.4.2
linux/linux_kernel 2.4.3
linux/linux_kernel 2.4.4
linux/linux_kernel 2.4.5
linux/linux_kernel 2.4.6
linux/linux_kernel 2.4.7
linux/linux_kernel 2.4.8
linux/linux_kernel 2.4.9
... and 40 more
Published Jun 16, 2003
Tracked Since Feb 18, 2026