Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Gentoo: 2003-03-21 Moderate Advisory for Ptrace Flaw in Kernels

gentoo
Calendar Grey March 21, 2003
Dist Gentoo Esm H88
Critical ptrace vulnerability allows local users on kernels 2.6 and 2.7 to gain unauthorized privileges, posing significant security risks for Gentoo systems
The Linux 2.2 and Linux 2.4 kernels have a flaw in ptrace

Summary


- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200303-17
- - ---------------------------------------------------------------------
    FIXED VERSION : Kernels with patch applied

- - ---------------------------------------------------------------------
- From advisory:
"The Linux 2.2 and Linux 2.4 kernels have a flaw in ptrace. This hole allows local users to obtain full privileges. Remote exploitation of this hole is not possible. Linux 2.5 is not believed to be vulnerable."
Read the full advisory at: http://marc.theaimsgroup.com/?l=linux-kernel&m=104791735604202&w=2
SOLUTION
It is recommended that all Gentoo Linux users upgrade their kernels.
If you are running any of gentoo-sources, gs-sources, pfeifer-sources sparc-sources or xfs-sources updates are available. Sync your tree and run emerge to install the latest version of the package. Then compile and install your new kernel and reboot.
If you are using ...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

PACKAGE : kernel
SUMMARY : ptrace flaw
DATE : 2003-03-21 08:59 UTC
EXPLOIT : local
VERSIONS AFFECTED : All except 2.5
CVE : CAN-2003-0127

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Related News

Your message here