Linux Ptrace/Setuid Exec Vulnerability
BID:3447
Info
Linux Ptrace/Setuid Exec Vulnerability
| Bugtraq ID: | 3447 |
| Class: | Design Error |
| CVE: |
CVE-2001-1384 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 18 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | Reported to Bugtraq by Rafal Wojtczuk <[email protected]> on October 18, 2001. |
| Vulnerable: |
Redhat kernel-source-2.4.7-10.i386.rpm Redhat kernel-headers-2.4.7-10.i386.rpm Redhat kernel-doc-2.4.7-10.i386.rpm Redhat kernel-BOOT-2.4.7-10.i386.rpm Redhat kernel-2.4.7-10.i686.rpm Redhat kernel-2.4.7-10.i386.rpm Linux kernel 2.4.10 Linux kernel 2.4.9 Linux kernel 2.4.8 Linux kernel 2.4.7 Linux kernel 2.4.3 Linux kernel 2.4.2 Linux kernel 2.2.19 Linux kernel 2.2.18 Linux kernel 2.2.17 Linux kernel 2.2.16 Linux kernel 2.2.15 Linux kernel 2.2.14 Linux kernel 2.2.13 Linux kernel 2.2.12 Linux kernel 2.2.11 Linux kernel 2.2.10 Linux kernel 2.2.9 Linux kernel 2.2.8 Linux kernel 2.2.7 Linux kernel 2.2.6 Linux kernel 2.2.5 Linux kernel 2.2.4 Linux kernel 2.2.3 Linux kernel 2.2.2 Linux kernel 2.2.1 Linux kernel 2.2 |
| Not Vulnerable: | |
Exploit / POC
Linux Ptrace/Setuid Exec Vulnerability
CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
An exploit is available:
CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
An exploit is available:
References
Linux Ptrace/Setuid Exec Vulnerability
References:
References:
- Linux ptrace-exec race condition exploit (CORE Security)