exploits , vulnerabilities , articles , Linux Kernel 2.2 mmap() Local Denial of Service Vulnerability

Title	Linux Kernel 2.2 mmap() Local Denial of Service Vulnerability
Published	2002-12-17-12:00AM
Updated	2003-06-30-10:59PM
Class	Design Error
CVE	CVE-2002-1380
Remote	No
Local	Yes
Credit	The discovery of this vulnerability is credited to Michal Zalewski <mzalewsk@razor.bindview.com>.
Vulnerable	Linux kernel 2.2.23 Linux kernel 2.2.22 Trustix Secure Linux 1.1 Trustix Secure Linux 1.2 Trustix Secure Linux 1.5 Linux kernel 2.2.21 Linux kernel 2.2.20 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc Linux kernel 2.2.19 EnGarde Secure Linux 1.0.1 Immunix Immunix OS 7 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Single Network Firewall 7.2 S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.4 S.u.S.E. Linux 7.0 Trustix Secure Linux 1.5 Linux kernel 2.2.18 Caldera OpenLinux 2.4 Conectiva Linux ecommerce Conectiva Linux graficas Conectiva Linux 4.0 Conectiva Linux 4.0 es Conectiva Linux 4.1 Conectiva Linux 4.2 Conectiva Linux 5.0 Conectiva Linux 5.1 Conectiva Linux 6.0 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc MandrakeSoft Linux Mandrake 6.0 MandrakeSoft Linux Mandrake 6.1 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 RedHat Linux 6.0 RedHat Linux 6.0 alpha RedHat Linux 6.0 sparc RedHat Linux 6.1 alpha RedHat Linux 6.1 i386 RedHat Linux 6.1 sparc RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.0 sparc S.u.S.E. Linux 6.0 S.u.S.E. Linux 6.1 S.u.S.E. Linux 6.1 alpha S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.3 alpha S.u.S.E. Linux 6.3 ppc S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.4 alpha S.u.S.E. Linux 6.4 ppc S.u.S.E. Linux 7.0 SCO eDesktop 2.4 SCO eServer 2.3.1 Slackware Linux 4.0 Slackware Linux 7.0 Slackware Linux 7.1 Wirex Immunix OS 6.2 Wirex Immunix OS 7.0 Wirex Immunix OS 7.0 Beta Linux kernel 2.2.17 MandrakeSoft Linux Mandrake 7.2 S.u.S.E. Linux 7.0 Trustix Secure Linux 1.2 Linux kernel 2.2.16 RedHat Linux 7.0 Sun Cobalt Qube 3 Sun Cobalt RaQ XTR Trustix Secure Linux 1.1 Linux kernel 2.2.15 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 Linux kernel 2.2.14 RedHat Linux 6.2 SCO eDesktop 2.4 SCO eServer 2.3.1 Sun Cobalt RaQ 4 Linux kernel 2.2.13 S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.4 Linux kernel 2.2.12 Linux kernel 2.2.11 Linux kernel 2.2.10 Caldera OpenLinux 2.3 Linux kernel 2.2.9 Linux kernel 2.2.8 Linux kernel 2.2.7 Linux kernel 2.2.6 Linux kernel 2.2.5 Linux kernel 2.2.4 Linux kernel 2.2.3 Linux kernel 2.2.2 Linux kernel 2.2.1
Not Vulnerable
Code	The following proof of concept code has been released by Michal Zalewski <mzalewsk@razor.bindview.com>. /data/vulnerabilities/exploits/linux22x-mmap.c
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability