linux-kernel-2.4.18 - several vulnerabilities

Fixed packages 4

Vulnerabilities 10

• Unscored —
  CVE-2003-0018

  Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers wit…

  Sep 1, 2004
• Unscored —
  CVE-2003-0461

  /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow l…

  Jul 25, 2003
• Unscored —
  CVE-2003-0462 Public exploit

  A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/pro…

  Jul 25, 2003
• Unscored —
  CVE-2003-0476

  The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the ca…

  Jun 28, 2003
• Unscored —
  CVE-2003-0501 Public exploit

  The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/se…

  Jul 4, 2003
• Unscored —
  CVE-2003-0550

  The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to …

  Jul 25, 2003
• Unscored —
  CVE-2003-0551

  The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to…

  Jul 25, 2003
• Unscored —
  CVE-2003-0552

  Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are …

  Jul 25, 2003
• Unscored —
  CVE-2003-0619 Public exploit EPSS 11%

  Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers t…

  Aug 1, 2003
• Unscored —
  CVE-2003-0643

  Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allow…

  Apr 15, 2005