CVE-2003-0019

uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2003-02-19

Last modified

2024-08-08

Affected products

• Linux (Redhat)

References

• http://www.ciac.org/ciac/bulletins/n-044.shtml
• http://www.iss.net/security_center/static/11276.php
• http://www.kb.cert.org/vuls/id/134025
• http://www.redhat.com/support/errata/RHSA-2003-056.html
• http://www.securityfocus.com/bid/6801