Linux /proc Filesystem Potential Information Disclosure Vulnerability

Bugtraq ID:	8002
Class:	Access Validation Error
CVE:	CVE-2003-0501
Remote:	No
Local:	Yes
Published:	Jun 20 2003 12:00AM
Updated:	Mar 19 2015 09:39AM
Credit:	Discovery of this vulnerability has been credited to Paul Starzetz <[email protected]>.
Vulnerable:	RedHat kernel-utils-2.4-8.29.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-utils-2.4-8.13.i386.rpm RedHat kernel-utils-2.4-7.4.i386.rpm + RedHat Linux 7.3 i386 RedHat kernel-uml-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-source-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-source-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-source-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-source-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-source-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-smp-2.4.7-10.i686.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.7-10.i586.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.7-10.athlon.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-smp-2.4.20-8.athlon.rpm RedHat kernel-smp-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-smp-2.4.2-2.i586.rpm RedHat kernel-smp-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-3.i586.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-3.athlon.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-smp-2.4.18-14.athlon.rpm + RedHat Linux 8.0 RedHat kernel-headers-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-headers-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-enterprise-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-doc-2.4.7-10.i386.rpm RedHat kernel-doc-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-doc-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-doc-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-doc-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-debug-2.4.18-3.i686.rpm RedHat kernel-debug-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-BOOT-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-BOOT-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-BOOT-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-BOOT-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-BOOT-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-bigmem-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-bigmem-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-bigmem-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-2.4.7-10.i686.rpm + RedHat Linux 7.2 RedHat kernel-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-2.4.7-10.athlon.rpm + RedHat Linux 7.2 RedHat kernel-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.20-8.i586.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.20-8.athlon.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-2.4.2-2.i586.rpm RedHat kernel-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-3.athlon.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-2.4.18-14.i586.rpm + RedHat Linux 8.0 RedHat kernel-2.4.18-14.athlon.rpm + RedHat Linux 8.0 Linux kernel 2.4.21 + Conectiva Linux 9.0 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Red Hat Enterprise Linux AS 3 + RedHat Desktop 3.0 + RedHat Enterprise Linux ES 3 + RedHat Enterprise Linux WS 3 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + SuSE SUSE Linux Enterprise Server 8 Linux kernel 2.4.20 Linux kernel 2.4.19 + Conectiva Linux 8.0 + Conectiva Linux Enterprise Edition 1.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 + S.u.S.E. Linux 8.1 + Slackware Linux -current + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 Linux kernel 2.4.18 + Astaro Security Linux 2.0 23 + Astaro Security Linux 2.0 16 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 + Red Hat Enterprise Linux AS 2.1 IA64 + RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 + RedHat Advanced Workstation for the Itanium Processor 2.1 + RedHat Linux 8.0 + RedHat Linux 7.3 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 + S.u.S.E. Linux Connectivity Server + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Firewall on CD + S.u.S.E. Linux Office Server + S.u.S.E. Linux Openexchange Server + S.u.S.E. Linux Personal 8.2 + S.u.S.E. SuSE eMail Server 3.1 + S.u.S.E. SuSE eMail Server III + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 + Turbolinux Turbolinux Server 8.0 + Turbolinux Turbolinux Server 7.0 + Turbolinux Turbolinux Workstation 8.0 + Turbolinux Turbolinux Workstation 7.0 Linux kernel 2.4.17 Linux kernel 2.4.16 + Sun Cobalt RaQ 550 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Workstation 3.1.1 Linux kernel 2.4.12 + Conectiva Linux 7.0 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 + Red Hat Enterprise Linux AS 2.1 IA64 + Red Hat Enterprise Linux AS 2.1 + RedHat Enterprise Linux ES 2.1 IA64 + RedHat Enterprise Linux ES 2.1 + RedHat Enterprise Linux WS 2.1 IA64 + RedHat Enterprise Linux WS 2.1 + RedHat Linux 7.2 ia64 + RedHat Linux 7.2 i386 + RedHat Linux 7.2 alpha + RedHat Linux 7.1 ia64 + RedHat Linux 7.1 i386 + RedHat Linux 7.1 alpha + Sun Linux 5.0.5 + Sun Linux 5.0.3 + Sun Linux 5.0 Linux kernel 2.4.8 + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.7 + RedHat Linux 7.2 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 Linux kernel 2.4.6 Linux kernel 2.4.5 + Slackware Linux 8.0 Linux kernel 2.4.4 + S.u.S.E. Linux 7.2 Linux kernel 2.4.3 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.2.25 Linux kernel 2.2.24 Linux kernel 2.2.23 Linux kernel 2.2.22 Linux kernel 2.2.21 Linux kernel 2.2.20 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 Linux kernel 2.2.19 + EnGarde Secure Linux 1.0.1 + Immunix Immunix OS 7+ + MandrakeSoft Single Network Firewall 7.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + S.u.S.E. Linux 7.0 + S.u.S.E. Linux 6.4 + S.u.S.E. Linux 6.3 + Trustix Secure Linux 1.5 Linux kernel 2.2.17 + Mandriva Linux Mandrake 7.2 + S.u.S.E. Linux 7.0 + Trustix Secure Linux 1.2 Linux kernel 2.2.16 Linux kernel 2.2.15 + MandrakeSoft Corporate Server 1.0.1 + Mandriva Linux Mandrake 7.1 Linux kernel 2.2.14 + Red Hat Linux 6.2 + SCO eDesktop 2.4 + SCO eServer 2.3.1 + Sun Cobalt RaQ 4 Linux kernel 2.2.13 + S.u.S.E. Linux 6.4 + S.u.S.E. Linux 6.3 Linux kernel 2.2.12 Linux kernel 2.2.11 Linux kernel 2.2.10 + Caldera OpenLinux 2.3 Linux kernel 2.2.9 Linux kernel 2.2.8 Linux kernel 2.2.7 Linux kernel 2.2.6 Linux kernel 2.2.5 Linux kernel 2.2.4 Linux kernel 2.2.3 Linux kernel 2.2.2 Linux kernel 2.2.1 Linux kernel 2.2 Leif M. Wright simplestmail.cgi 2.2.18
Not Vulnerable:

Linux /proc Filesystem Potential Information Disclosure Vulnerability

A potential information disclosure vulnerability has been reported for the Linux /proc filesystem, specifically when invoking setuid applications. As a result, an unprivileged user may be able to read the contents of a setuid application's environment data. This could potentially, although unlikely, result in the disclosure of sensitive information, such as restricted file path information.

Linux /proc Filesystem Potential Information Disclosure Vulnerability

The following proof of concept has been supplied:

• /data/vulnerabilities/exploits/procex.c

Linux /proc Filesystem Potential Information Disclosure Vulnerability

Solution:
Debian has released an advisory (DSA 423-1) that addresses the issue that is described in this BID for the IA-64 architecture. Further details regarding obtaining and applying fixes can be found in the referenced advisory.

Guardian Digital has released advisory ESA-20032407-018 to address this issue. See referenced advisory for additional information.

SuSE has released advisory SuSE-SA:2003:034 to address this issue. Specific update information has been made available. Refer to the referenced advisory for additional details.

Debian has released advisory DSA-358-4 to address this issue.

Conectiva has released an advisory CLA-2003:796 with fixes to address this issue.


RedHat kernel-2.4.18-3.i686.rpm

• Red Hat kernel-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-20.7.i686.rpm

RedHat kernel-2.4.2-2.i386.rpm

• Red Hat kernel-2.4.20-20.7.athlon.rpm
  ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m


• Red Hat kernel-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-20.7.i386.rpm

RedHat kernel-source-2.4.18-14.i386.rpm

• Red Hat kernel-source-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-source-2.4.20-20.8.i386 .rpm

RedHat kernel-bigmem-2.4.18-14.i686.rpm

• Red Hat kernel-bigmem-2.4.20-20.8.i686.rpm
  ftp://updates.redhat.com/8.0/en/os/i686/kernel-bigmem-2.4.20-20.8.i686 .rpm

RedHat kernel-BOOT-2.4.7-10.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-doc-2.4.2-2.i386.rpm

• Red Hat kernel-doc-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-20.7.i386.rp m

RedHat kernel-2.4.20-8.athlon.rpm

• Red Hat kernel-2.4.20-20.9.athlon.rpm
  ftp://updates.redhat.com/9/en/os/athlon/kernel-2.4.20-20.9.athlon.rpm

RedHat kernel-source-2.4.2-2.i386.rpm

• Red Hat kernel-source-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm

RedHat kernel-2.4.7-10.athlon.rpm

• Red Hat kernel-2.4.20-20.7.athlon.rpm
  ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

RedHat kernel-doc-2.4.18-3.i386.rpm

• Red Hat kernel-doc-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-20.7.i386.rp m

RedHat kernel-BOOT-2.4.20-8.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-BOOT-2.4.20-20.9.i386.rpm

RedHat kernel-2.4.20-8.i586.rpm

• Red Hat kernel-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-2.4.20-20.9.i386.rpm


• Red Hat kernel-2.4.20-20.9.i586.rpm
  ftp://updates.redhat.com/9/en/os/i586/kernel-2.4.20-20.9.i586.rpm

RedHat kernel-2.4.7-10.i686.rpm

• Red Hat kernel-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-20.7.i686.rpm


• Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

RedHat kernel-bigmem-2.4.20-8.i686.rpm

• Red Hat kernel-bigmem-2.4.20-20.9.i686.rpm
  ftp://updates.redhat.com/9/en/os/i686/kernel-bigmem-2.4.20-20.9.i686.r pm

RedHat kernel-source-2.4.20-8.i386.rpm

• Red Hat kernel-source-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-source-2.4.20-20.9.i386.r pm

RedHat kernel-2.4.20-8.i686.rpm

• Red Hat kernel-2.4.20-20.9.i686.rpm
  ftp://updates.redhat.com/9/en/os/i686/kernel-2.4.20-20.9.i686.rpm

RedHat kernel-BOOT-2.4.18-3.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-doc-2.4.18-14.i386.rpm

• Red Hat kernel-doc-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-doc-2.4.20-20.8.i386.rp m

RedHat kernel-BOOT-2.4.2-2.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-20.7.i386.r pm

RedHat kernel-2.4.7-10.i386.rpm

• Red Hat kernel-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-20.7.i386.rpm


• Red Hat kernel-2.4.20-20.7.i586.rpm
  ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-20.7.i586.rpm

RedHat kernel-2.4.18-3.athlon.rpm

• Red Hat kernel-2.4.20-20.7.athlon.rpm
  ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-20.7.athlon.rp m

RedHat kernel-2.4.18-3.i386.rpm

• Red Hat kernel-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-20.7.i386.rpm


• Red Hat kernel-2.4.20-20.7.i586.rpm
  ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-20.7.i586.rpm

RedHat kernel-bigmem-2.4.18-3.i686.rpm

• Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

RedHat kernel-source-2.4.7-10.i386.rpm

• Red Hat kernel-source-2.4.20-20.7.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-20.7.i386 .rpm

RedHat kernel-2.4.18-14.i586.rpm

• Red Hat kernel-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-2.4.20-20.8.i386.rpm


• Red Hat kernel-2.4.20-20.8.i586.rpm
  ftp://updates.redhat.com/8.0/en/os/i586/kernel-2.4.20-20.8.i586.rpm

RedHat kernel-2.4.18-14.i686.rpm

• Red Hat kernel-2.4.20-20.8.i686.rpm
  ftp://updates.redhat.com/8.0/en/os/i686/kernel-2.4.20-20.8.i686.rpm

RedHat kernel-doc-2.4.20-8.i386.rpm

• Red Hat kernel-doc-2.4.20-20.9.i386.rpm
  ftp://updates.redhat.com/9/en/os/i386/kernel-doc-2.4.20-20.9.i386.rpm

RedHat kernel-BOOT-2.4.18-14.i386.rpm

• Red Hat kernel-BOOT-2.4.20-20.8.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/kernel-BOOT-2.4.20-20.8.i386.r pm

RedHat kernel-2.4.18-14.athlon.rpm

• Red Hat kernel-2.4.20-20.8.athlon.rpm
  ftp://updates.redhat.com/8.0/en/os/athlon/kernel-2.4.20-20.8.athlon.rp m

RedHat kernel-2.4.2-2.i686.rpm

• Red Hat kernel-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.20-20.7.i686.rpm


• Red Hat kernel-bigmem-2.4.20-20.7.i686.rpm
  ftp://updates.redhat.com/7.1/en/os/i686/kernel-bigmem-2.4.20-20.7.i686 .rpm

Linux kernel 2.4.18

• Debian kernel-doc-2.4.18_2.4.18-13_all.deb
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/ke rnel-doc-2.4.18_2.4.18-13_all.deb


• Debian kernel-headers-2.4.18-1-586tsc_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-586tsc_2.4.18-11_i386.deb


• Debian kernel-headers-2.4.18-1-686-smp_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-686-smp_2.4.18-11_i386.deb


• Debian kernel-headers-2.4.18-1-686_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-686_2.4.18-11_i386.deb


• Debian kernel-headers-2.4.18-1-generic_2.4.18-10_alpha.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-a lpha/kernel-headers-2.4.18-1-generic_2.4.18-10_alpha.deb


• Debian kernel-headers-2.4.18-1-k6_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-k6_2.4.18-11_i386.deb


• Debian kernel-headers-2.4.18-1-k7_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1-k7_2.4.18-11_i386.deb


• Debian kernel-headers-2.4.18-1-smp_2.4.18-10_alpha.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-a lpha/kernel-headers-2.4.18-1-smp_2.4.18-10_alpha.deb


• Debian kernel-headers-2.4.18-1_2.4.18-10_alpha.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-a lpha/kernel-headers-2.4.18-1_2.4.18-10_alpha.deb


• Debian kernel-headers-2.4.18-1_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-headers-2.4.18-1_2.4.18-11_i386.deb


• Debian kernel-headers-2.4.18-bf2.4_2.4.18-5woody4_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-i38 6bf/kernel-headers-2.4.18-bf2.4_2.4.18-5woody4_i386.deb


• Debian kernel-image-2.4.18-1-386_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-386_2.4.18-11_i386.deb


• Debian kernel-image-2.4.18-1-586tsc_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-586tsc_2.4.18-11_i386.deb


• Debian kernel-image-2.4.18-1-686-smp_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-686-smp_2.4.18-11_i386.deb


• Debian kernel-image-2.4.18-1-686_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-686_2.4.18-11_i386.deb


• Debian kernel-image-2.4.18-1-generic_2.4.18-10_alpha.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-a lpha/kernel-image-2.4.18-1-generic_2.4.18-10_alpha.deb


• Debian kernel-image-2.4.18-1-k6_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-k6_2.4.18-11_i386.deb


• Debian kernel-image-2.4.18-1-k7_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-image-2.4.18-1-k7_2.4.18-11_i386.deb


• Debian kernel-image-2.4.18-1-smp_2.4.18-10_alpha.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-a lpha/kernel-image-2.4.18-1-smp_2.4.18-10_alpha.deb


• Debian kernel-image-2.4.18-bf2.4_2.4.18-5woody4_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-i38 6bf/kernel-image-2.4.18-bf2.4_2.4.18-5woody4_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-386_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-386_2.4.18-11_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-586tsc_2.4.18-11_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-686-smp_2.4.18-11_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-686_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-686_2.4.18-11_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-k6_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-k6_2.4.18-11_i386.deb


• Debian kernel-pcmcia-modules-2.4.18-1-k7_2.4.18-11_i386.deb
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.18-1-i 386/kernel-pcmcia-modules-2.4.18-1-k7_2.4.18-11_i386.deb


• Debian kernel-source-2.4.18_2.4.18-13_all.deb
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.18/ke rnel-source-2.4.18_2.4.18-13_all.deb

Linux kernel 2.4.19

• Conectiva devfsd-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/devfsd-2.4.19-1U80_20cl.i38 6.rpm


• Conectiva k_athlon-2.4.19-333.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_athlon-2.4.19-333.i5 86.rpm


• Conectiva k_debug-2.4.19-333.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_debug-2.4.19-333.i58 6.rpm


• Conectiva k_deflt-2.4.19-333.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_deflt-2.4.19-333.i58 6.rpm


• Conectiva k_psmp-2.4.19-333.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_psmp-2.4.19-333.i586 .rpm


• Conectiva k_smp-2.4.19-333.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/k_smp-2.4.19-333.i586. rpm


• Conectiva kernel-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i38 6.rpm


• Conectiva kernel-2.4.19-1U80_20cl.i586.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i58 6.rpm


• Conectiva kernel-2.4.19-1U80_20cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-2.4.19-1U80_20cl.i68 6.rpm


• Conectiva kernel-BOOT-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-BOOT-2.4.19-1U80_20c l.i386.rpm


• Conectiva kernel-doc-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-doc-2.4.19-1U80_20cl .i386.rpm


• Conectiva kernel-enterprise-2.4.19-1U80_20cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-enterprise-2.4.19-1U 80_20cl.i686.rpm


• Conectiva kernel-headers-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-headers-2.4.19-1U80_ 20cl.i386.rpm


• Conectiva kernel-rbc-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-rbc-2.4.19-1U80_20cl .i386.rpm


• Conectiva kernel-smp-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i386.rpm


• Conectiva kernel-smp-2.4.19-1U80_20cl.i586.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i586.rpm


• Conectiva kernel-smp-2.4.19-1U80_20cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-smp-2.4.19-1U80_20cl .i686.rpm


• Conectiva kernel-source-2.4.19-1U80_20cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/8/RPMS/kernel-source-2.4.19-1U80_2 0cl.i386.rpm


• Conectiva kernel-source-2.4.19.SuSE-333.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/kernel-source-2.4.19.S uSE-333.i586.rpm

Linux kernel 2.4.21

• Conectiva devfsd-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/devfsd-2.4.21-31301U90_13cl .i386.rpm


• Conectiva kernel24-2.4.21-31301U90_13cl.athlon.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-2.4.21-31301U90_13 cl.athlon.rpm


• Conectiva kernel24-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-2.4.21-31301U90_13 cl.i386.rpm


• Conectiva kernel24-2.4.21-31301U90_13cl.i586.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-2.4.21-31301U90_13 cl.i586.rpm


• Conectiva kernel24-2.4.21-31301U90_13cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-2.4.21-31301U90_13 cl.i686.rpm


• Conectiva kernel24-2.4.21-31301U90_13cl.pentium4.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-2.4.21-31301U90_13 cl.pentium4.rpm


• Conectiva kernel24-BOOT-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-BOOT-2.4.21-31301U 90_13cl.i386.rpm


• Conectiva kernel24-doc-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-doc-2.4.21-31301U9 0_13cl.i386.rpm


• Conectiva kernel24-enterprise-2.4.21-31301U90_13cl.athlon.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-enterprise-2.4.21- 31301U90_13cl.athlon.rpm


• Conectiva kernel24-enterprise-2.4.21-31301U90_13cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-enterprise-2.4.21- 31301U90_13cl.i686.rpm


• Conectiva kernel24-enterprise-2.4.21-31301U90_13cl.pentium4.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-enterprise-2.4.21- 31301U90_13cl.pentium4.rpm


• Conectiva kernel24-headers-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-headers-2.4.21-313 01U90_13cl.i386.rpm


• Conectiva kernel24-rbc-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-rbc-2.4.21-31301U9 0_13cl.i386.rpm


• Conectiva kernel24-smp-2.4.21-31301U90_13cl.athlon.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-smp-2.4.21-31301U9 0_13cl.athlon.rpm


• Conectiva kernel24-smp-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-smp-2.4.21-31301U9 0_13cl.i386.rpm


• Conectiva kernel24-smp-2.4.21-31301U90_13cl.i586.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-smp-2.4.21-31301U9 0_13cl.i586.rpm


• Conectiva kernel24-smp-2.4.21-31301U90_13cl.i686.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-smp-2.4.21-31301U9 0_13cl.i686.rpm


• Conectiva kernel24-smp-2.4.21-31301U90_13cl.pentium4.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-smp-2.4.21-31301U9 0_13cl.pentium4.rpm


• Conectiva kernel24-source-2.4.21-31301U90_13cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/kernel24-source-2.4.21-3130 1U90_13cl.i386.rpm

Linux /proc Filesystem Potential Information Disclosure Vulnerability

References:

• [SECURITY] [DSA-358-4] New kernel packages fix potential "oops" (Debian)
  
• Linux /proc sensitive information disclosure (Paul Starzetz )