CVE

Id
4187  
CVE No.
CVE-2001-1384  
Status
Candidate  
Description
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.  
Phase
Proposed (20020830)  
Votes
ACCEPT(7) Armstrong, Baker, Cole, Cox, Frech, Green, Wall | NOOP(1) Foat  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
19703 4187 CVE-2001-1384 BUGTRAQ:20011018 Flaws in recent Linux kernels  View
19704 4187 CVE-2001-1384 URL:http://marc.info/?l=bugtraq&m=100343090106914&w=2  View
19705 4187 CVE-2001-1384 REDHAT:RHSA-2001:129  View
19706 4187 CVE-2001-1384 URL:http://www.redhat.com/support/errata/RHSA-2001-129.html  View
19707 4187 CVE-2001-1384 REDHAT:RHSA-2001:130  View
19708 4187 CVE-2001-1384 URL:http://www.redhat.com/support/errata/RHSA-2001-130.html  View
19709 4187 CVE-2001-1384 SUSE:SuSE-SA:2001:036  View
19710 4187 CVE-2001-1384 URL:http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html  View
19711 4187 CVE-2001-1384 IMMUNIX:IMNX-2001-70-035-01  View
19712 4187 CVE-2001-1384 URL:http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01  View
19713 4187 CVE-2001-1384 CALDERA:CSSA-2001-036.0  View
19714 4187 CVE-2001-1384 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt  View
19715 4187 CVE-2001-1384 MANDRAKE:MDKSA-2001:079  View
19716 4187 CVE-2001-1384 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3  View
19717 4187 CVE-2001-1384 MANDRAKE:MDKSA-2001:082  View
19718 4187 CVE-2001-1384 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3  View
19719 4187 CVE-2001-1384 ENGARDE:ESA-20011019-02  View
19720 4187 CVE-2001-1384 URL:http://www.linuxsecurity.com/advisories/other_advisory-1650.html  View
19721 4187 CVE-2001-1384 HP:HPSBTL0112-003  View
19722 4187 CVE-2001-1384 URL:http://online.securityfocus.com/advisories/3713  View
19723 4187 CVE-2001-1384 BUGTRAQ:20011019 TSLSA-2001-0028  View
19724 4187 CVE-2001-1384 URL:http://marc.info/?l=bugtraq&m=100350685431610&w=2  View
19725 4187 CVE-2001-1384 BID:3447  View
19726 4187 CVE-2001-1384 URL:http://www.securityfocus.com/bid/3447  View
19727 4187 CVE-2001-1384 XF:linux-ptrace-race-condition(7311)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64185 JVNDB-2001-000159 Linux Kernel の exec() 関数における権限を取得される脆弱性 Linux Kernel において、exec() 関数の実装の不備のため ptrace() 経由で利用する場合、ターゲットプロセスの権限を取得される脆弱性が存在します。 CVE-2001-1384 4187 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000159.html  View