BID:8233

Multiple Linux 2.4 Kernel Vulnerabilities

Info

Multiple Linux 2.4 Kernel Vulnerabilities

Bugtraq ID:	8233
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Jul 21 2003 12:00AM
Updated:	Jul 21 2003 12:00AM
Credit:	These issues were reported in a Red Hat advisory. Paul Starzetz is credited with discovering the execve() race condition. Olaf Kirch is reported with discovery the error in the RPC code. Jerry Kreuscher discovered the issue with spoofing Forwarding tabl
Vulnerable:	RedHat kernel-utils-2.4-8.29.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-utils-2.4-8.13.i386.rpm + RedHat Linux 8.0 RedHat kernel-utils-2.4-7.4.i386.rpm + RedHat Linux 7.3 RedHat kernel-uml-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-source-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-source-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-source-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-source-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-source-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-smp-2.4.7-10.i686.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.7-10.i586.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.7-10.athlon.rpm + RedHat Linux 7.2 RedHat kernel-smp-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-smp-2.4.20-8.athlon.rpm RedHat kernel-smp-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-smp-2.4.2-2.i586.rpm RedHat kernel-smp-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-3.i586.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-3.athlon.rpm + RedHat Linux 7.3 RedHat kernel-smp-2.4.18-14.i686.rpm RedHat kernel-smp-2.4.18-14.athlon.rpm + RedHat Linux 8.0 RedHat kernel-headers-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-headers-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-enterprise-2.4.2-2.i686.rpm + RedHat Linux 7.1 RedHat kernel-doc-2.4.7-10.i386.rpm RedHat kernel-doc-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-doc-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-doc-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-doc-2.4.18-14.i386.rpm + RedHat Linux 8.0 RedHat kernel-debug-2.4.18-3.i686.rpm RedHat kernel-debug-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-BOOT-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-BOOT-2.4.20-8.i386.rpm + RedHat Linux 9.0 i386 RedHat kernel-BOOT-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-BOOT-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-BOOT-2.4.18-14.i386.rpm RedHat kernel-bigmem-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-bigmem-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-bigmem-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-2.4.7-10.i686.rpm + RedHat Linux 7.2 RedHat kernel-2.4.7-10.i386.rpm + RedHat Linux 7.2 RedHat kernel-2.4.7-10.athlon.rpm + RedHat Linux 7.2 RedHat kernel-2.4.20-8.i686.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.20-8.i586.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.20-8.athlon.rpm + RedHat Linux 9.0 i386 RedHat kernel-2.4.2-2.i686.rpm RedHat kernel-2.4.2-2.i586.rpm RedHat kernel-2.4.2-2.i386.rpm + RedHat Linux 7.1 RedHat kernel-2.4.18-3.i686.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-3.i386.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-3.athlon.rpm + RedHat Linux 7.3 RedHat kernel-2.4.18-14.i686.rpm + RedHat Linux 8.0 RedHat kernel-2.4.18-14.i586.rpm + RedHat Linux 8.0 RedHat kernel-2.4.18-14.athlon.rpm Linux kernel 2.4.21 pre4 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 Linux kernel 2.4.21 pre1 Linux kernel 2.4.21 + Conectiva Linux 9.0 + Mandriva Linux Mandrake 9.1 ppc + Mandriva Linux Mandrake 9.1 + Red Hat Enterprise Linux AS 3 + RedHat Desktop 3.0 + RedHat Enterprise Linux ES 3 + RedHat Enterprise Linux WS 3 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + SuSE SUSE Linux Enterprise Server 8 Linux kernel 2.4.20 Linux kernel 2.4.19 -pre6 Linux kernel 2.4.19 -pre5 Linux kernel 2.4.19 -pre4 Linux kernel 2.4.19 -pre3 Linux kernel 2.4.19 -pre2 Linux kernel 2.4.19 -pre1 Linux kernel 2.4.19 + Conectiva Linux 8.0 + Conectiva Linux Enterprise Edition 1.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Multi Network Firewall 2.0 + Mandriva Linux Mandrake 9.0 + S.u.S.E. Linux 8.1 + Slackware Linux -current + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 Linux kernel 2.4.18 pre-8 Linux kernel 2.4.18 pre-7 Linux kernel 2.4.18 pre-6 Linux kernel 2.4.18 pre-5 Linux kernel 2.4.18 pre-4 Linux kernel 2.4.18 pre-3 Linux kernel 2.4.18 pre-2 Linux kernel 2.4.18 pre-1 Linux kernel 2.4.18 x86 + Debian Linux 3.0 ia-32 Linux kernel 2.4.18 + Astaro Security Linux 2.0 23 + Astaro Security Linux 2.0 16 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 + Red Hat Enterprise Linux AS 2.1 IA64 + RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 + RedHat Advanced Workstation for the Itanium Processor 2.1 + RedHat Linux 8.0 + RedHat Linux 7.3 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 + S.u.S.E. Linux Connectivity Server + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Firewall on CD + S.u.S.E. Linux Office Server + S.u.S.E. Linux Openexchange Server + S.u.S.E. Linux Personal 8.2 + S.u.S.E. SuSE eMail Server 3.1 + S.u.S.E. SuSE eMail Server III + SuSE SUSE Linux Enterprise Server 8 + SuSE SUSE Linux Enterprise Server 7 + Turbolinux Turbolinux Server 8.0 + Turbolinux Turbolinux Server 7.0 + Turbolinux Turbolinux Workstation 8.0 + Turbolinux Turbolinux Workstation 7.0 Linux kernel 2.4.17 Linux kernel 2.4.16 + Sun Cobalt RaQ 550 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Workstation 3.1.1 Linux kernel 2.4.12 + Conectiva Linux 7.0 Linux kernel 2.4.11 Linux kernel 2.4.10 Linux kernel 2.4.9 + Red Hat Enterprise Linux AS 2.1 IA64 + Red Hat Enterprise Linux AS 2.1 + RedHat Enterprise Linux ES 2.1 IA64 + RedHat Enterprise Linux ES 2.1 + RedHat Enterprise Linux WS 2.1 IA64 + RedHat Enterprise Linux WS 2.1 + RedHat Linux 7.2 ia64 + RedHat Linux 7.2 i386 + RedHat Linux 7.2 alpha + RedHat Linux 7.1 ia64 + RedHat Linux 7.1 i386 + RedHat Linux 7.1 alpha + Sun Linux 5.0.5 + Sun Linux 5.0.3 + Sun Linux 5.0 Linux kernel 2.4.8 + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.7 + RedHat Linux 7.2 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 Linux kernel 2.4.6 Linux kernel 2.4.5 + Slackware Linux 8.0 Linux kernel 2.4.4 + S.u.S.E. Linux 7.2 Linux kernel 2.4.3 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Linux kernel 2.4.2 Linux kernel 2.4.1 Linux kernel 2.4 .0-test9 Linux kernel 2.4 .0-test8 Linux kernel 2.4 .0-test7 Linux kernel 2.4 .0-test6 Linux kernel 2.4 .0-test5 Linux kernel 2.4 .0-test4 Linux kernel 2.4 .0-test3 Linux kernel 2.4 .0-test2 Linux kernel 2.4 .0-test12 Linux kernel 2.4 .0-test11 Linux kernel 2.4 .0-test10 Linux kernel 2.4 .0-test1 Linux kernel 2.4

Not Vulnerable:

Discussion

Multiple Linux 2.4 Kernel Vulnerabilities

Red Hat has released an advisory reporting the existence of multiple vulnerabilities in the Linux 2.4 kernel. Exploitation of these issues could expose sensitive information to local attackers, permit denial of service attacks or allow malicious local users to gain elevated privileges.

Exploit / POC

Multiple Linux 2.4 Kernel Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Multiple Linux 2.4 Kernel Vulnerabilities

Solution:
Debian has released an advisory (DSA 423-1) that addresses the issues that are described in this BID for the IA-64 architecture. Further details regarding obtaining and applying fixes can be found in the referenced advisory.

Debian has also released an updated advisory (DSA 358-2) with updated i386 and alpha fixes to correct an issues with the previous fixes. Details on obtaining and applying fixes can be found in the referenced advisory.

Red Hat has released an advisory (RHSA-2003:238-01) that addresses these issues. Details on obtaining and applying fixes can be found in the attached advisory.

Conectiva has released an advisory (CLSA-2003:712) that provides kernel updates for CLEE. Please see the attached advisory for details for obtaining and applying updates.

SuSE has released advisory SuSE-SA:2003:034 to address this issue. Specific update information has been made available. Refer to the referenced advisory for additional details.

Red Hat has released an advisory (RHSA-2003:198-16) containing updated IA64 fixes for Red Hat Enterprise Linux AS (v. 2.1) and Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor. These fixes are only available through the Red Hat Network which can be found at http://rhn.redhat.com/.

Red Hat has also released an advisory (RHSA-2003-239) containing kernel fixes for Red Hat Enterprise Linux AS, ES, and WS(v. 2.1). These fixes are also only available through the Red Hat Network which can be found at http://rhn.redhat.com/.

Turbolinux has released an advisory with fixes in order to address this and other issues.

RHBA-2003:263-05 (for non-Enterprise Red Hat distributions) has been released to address unrelated bugs but provides Kernel updates that include more recent fixes for this and other security vulnerabilities.

Conectiva has released a security advisory (CLA-2003:796) containing fixes to address issues with STP protocol and the kernel RPC code in Conectiva Linux 8.

RedHat kernel-2.4.18-3.i686.rpm