Unscored severity · published Feb 19, 2003
CVE-2003-0019
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g
–
CVSS
0.9%
EPSS
No
On KEV
Description
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Redhat
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0019
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0019
www.ciac.org
http://www.ciac.org/ciac/bulletins/n-044.shtml
Patch
http://www.iss.net/security_center/static/11276.php
US Government Resource
http://www.kb.cert.org/vuls/id/134025
Patch
http://www.redhat.com/support/errata/RHSA-2003-056.html
www.securityfocus.com
http://www.securityfocus.com/bid/6801
More from Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
9.8
CVE-1999-0043
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others
8.1
CVE-2018-20346
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3…
7.5
CVE-2018-17962
Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…