SkipNavigation
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric



 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

Vulnerability Note VU#337238

Red Hat Enterprise Linux kernel-2.4.21 does not perform adequate checking of eflags when in 32-bit ptrace emulation mode

Overview

Red Hat Enterprise Linux kernel prior to version 2.4.21 does not perform adequate checking of eflags when in 32-bit ptrace emulation mode. This could allow a local user to gain elevated or root privileges.

I. Description

The Linux kernel handles the basic functionality of the operating system. There is a vulnerability in the checking of eflags when in 32-bit ptrace emulation mode allowing a local user to gain elevated or root privileges. This vulnerability is reported to only affect kernels built for the AMD64 architecture.

II. Impact

A local user could gain elevated or root privileges.

III. Solution

Upgrade or Apply Patch
Upgrade or apply patch as specified by your vendor.

Systems Affected

VendorStatusDate NotifiedDate Updated
Red Hat Inc.Vulnerable20-Jan-2004

References


https://rhn.redhat.com/errata/RHSA-2004-017.html
http://www.secunia.com/advisories/10658/
http://www.ciac.org/ciac/bulletins/o-063.shtml

Credit

Thanks to Red Hat Inc. for the information contained in their advisory.

This document was written by Damon Morda.

Other Information

Date Public:2004-01-16
Date First Published:2004-01-20
Date Last Updated:2004-01-20
CERT Advisory: 
CVE-ID(s):CAN-2004-0001
NVD-ID(s):CAN-2004-0001
US-CERT Technical Alerts: 
Metric:2.95
Document Revision:12

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2004 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader