Vulnerability in Redhat Linux

CVE-2003-0019

uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.

EPSS: 0.009 (55.6th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
  • cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
  • cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
  • cve@mitre.org (vdb-entry, x_refsource_BID)