Search

published date: August 27, 2003

CVE-2003-0462 : Denial of Service Vulnerability

Description

A race condition in the way env_start and env_end pointers are initialized in the execve system call and used in fs/proc/base.c on Linux 2.4 allows local users to cause a denial of service (crash).

Product(s):

  • MandrakeSoft Mandrake Multi Network Firewall 8.2
  • Linux Kernel 2.4.0
  • Linux Kernel 2.4.0 test10
  • Linux Kernel 2.4.0 test11
  • Linux Kernel 2.4.0 test12

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2003-0462, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2003-0462 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?