CVE-2003-0501

Linux - Info Disclosure

Title source: llm

Description

The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.

Exploits (1)

exploitdb WORKING POC VERIFIED

by IhaQueR · clocallinux

https://www.exploit-db.com/exploits/22813

View Code ZIP pw:eip

References (7)

[Patch, Vendor Advisory] http://www.debian.org/security/2004/dsa-423

[Patch, Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-198.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-238.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-239.html

[Third Party Advisory] http://www.debian.org/security/2004/dsa-358

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A328

[Mailing List] http://marc.info/?l=bugtraq&m=105621758104242

Scores

EPSS 0.0037

EPSS Percentile 58.1%

Classification

Status draft

Affected Products (1)

linux/linux_kernel

Timeline

Published Aug 07, 2003

Tracked Since Feb 18, 2026