Vulnerability in Linux Kernel
CVE-2001-1384
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.010 (60.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 60th percentile — 60.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000
Affected products
- Linux Kernel — versions 2.2.0, 2.2.1, 2.2.2
References
- www.redhat.com/support/errata/RHSA-2001-130.html (vendor-advisory)
- download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01 (vendor-advisory)
- www.linuxsecurity.com/advisories/other_advisory-1650.html (vendor-advisory, Patch, Vendor Advisory)
- online.securityfocus.com/advisories/3713 (vendor-advisory)
- marc.info/ (mailing-list)
- www.redhat.com/support/errata/RHSA-2001-129.html (vendor-advisory)
- marc.info/ (mailing-list)
- www.iss.net/security_center/static/7311.php (Patch, vdb-entry, Vendor Advisory)
- www.novell.com/linux/security/advisories/2001_036_kernel_txt.html (vendor-advisory)
- www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3 (vendor-advisory)