exploits , vulnerabilities , articles , Linux 2.4 Kernel execve() System Call Race Condition Vulnerability

Title	Linux 2.4 Kernel execve() System Call Race Condition Vulnerability
Published	2003-06-26-12:00AM
Updated	2004-01-15-09:09AM
Class	Race Condition Error
CVE	CAN-2003-0462
Remote	No
Local	Yes
Credit	The discovery of this vulnerability has been credited to Paul Starzetz <paul@starzetz.de>.
Vulnerable	RedHat Linux Advanced Work Station 2.1 RedHat kernelutils2.48.29.i386.rpm RedHat Linux 9.0 i386 RedHat kernelutils2.48.13.i386.rpm RedHat Linux 8.0 RedHat kernelutils2.47.4.i386.rpm RedHat Linux 7.3 RedHat kerneluml2.4.1814.i686.rpm RedHat Linux 8.0 RedHat kernelsource2.4.710.i386.rpm RedHat Linux 7.2 RedHat kernelsource2.4.208.i386.rpm RedHat Linux 9.0 i386 RedHat kernelsource2.4.22.i386.rpm RedHat Linux 7.1 RedHat kernelsource2.4.183.i386.rpm RedHat Linux 7.3 RedHat kernelsource2.4.1814.i386.rpm RedHat Linux 8.0 RedHat kernelsmp2.4.710.i686.rpm RedHat Linux 7.2 RedHat kernelsmp2.4.710.i586.rpm RedHat Linux 7.2 RedHat kernelsmp2.4.710.athlon.rpm RedHat Linux 7.2 RedHat kernelsmp2.4.208.i686.rpm RedHat Linux 9.0 i386 RedHat kernelsmp2.4.208.athlon.rpm RedHat Linux 9.0 i386 RedHat kernelsmp2.4.22.i686.rpm RedHat Linux 7.1 RedHat kernelsmp2.4.22.i586.rpm RedHat Linux 7.1 RedHat kernelsmp2.4.183.i686.rpm RedHat Linux 7.3 RedHat kernelsmp2.4.183.i586.rpm RedHat Linux 7.3 RedHat kernelsmp2.4.183.athlon.rpm RedHat Linux 7.3 RedHat kernelsmp2.4.1814.i686.rpm RedHat Linux 8.0 RedHat kernelsmp2.4.1814.athlon.rpm RedHat Linux 8.0 RedHat kernelheaders2.4.710.i386.rpm RedHat Linux 7.2 RedHat kernelheaders2.4.22.i386.rpm RedHat Linux 7.1 RedHat kernelenterprise2.4.22.i686.rpm RedHat Linux 7.1 RedHat kerneldoc2.4.710.i386.rpm RedHat Linux 7.2 RedHat kerneldoc2.4.208.i386.rpm RedHat Linux 9.0 i386 RedHat kerneldoc2.4.22.i386.rpm RedHat Linux 7.1 RedHat kerneldoc2.4.183.i386.rpm RedHat Linux 7.3 RedHat kerneldoc2.4.1814.i386.rpm RedHat Linux 8.0 RedHat kerneldebug2.4.183.i686.rpm RedHat Linux 7.3 RedHat kerneldebug2.4.1814.i686.rpm RedHat Linux 8.0 RedHat kernelBOOT2.4.710.i386.rpm RedHat Linux 7.2 RedHat kernelBOOT2.4.208.i386.rpm RedHat Linux 9.0 i386 RedHat kernelBOOT2.4.22.i386.rpm RedHat Linux 7.1 RedHat kernelBOOT2.4.183.i386.rpm RedHat Linux 7.3 RedHat kernelBOOT2.4.1814.i386.rpm RedHat Linux 8.0 RedHat kernelbigmem2.4.208.i686.rpm RedHat Linux 9.0 i386 RedHat kernelbigmem2.4.183.i686.rpm RedHat Linux 7.3 RedHat kernelbigmem2.4.1814.i686.rpm RedHat Linux 8.0 RedHat kernel2.4.710.i686.rpm RedHat Linux 7.2 RedHat kernel2.4.710.i386.rpm RedHat Linux 7.2 RedHat kernel2.4.710.athlon.rpm RedHat Linux 7.2 RedHat kernel2.4.208.i686.rpm RedHat Linux 9.0 i386 RedHat kernel2.4.208.i586.rpm RedHat Linux 9.0 i386 RedHat kernel2.4.208.athlon.rpm RedHat Linux 9.0 i386 RedHat kernel2.4.22.i686.rpm RedHat Linux 7.1 RedHat kernel2.4.22.i586.rpm RedHat Linux 7.1 RedHat kernel2.4.22.i386.rpm RedHat Linux 7.1 RedHat kernel2.4.183.i686.rpm RedHat Linux 7.3 RedHat kernel2.4.183.i386.rpm RedHat Linux 7.3 RedHat kernel2.4.183.athlon.rpm RedHat Linux 7.3 RedHat kernel2.4.1814.i686.rpm RedHat Linux 8.0 RedHat kernel2.4.1814.i586.rpm RedHat Linux 8.0 RedHat kernel2.4.1814.athlon.rpm RedHat Linux 8.0 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux AS 2.1 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Corporate Server 2.1 Linux kernel 2.4.21 Conectiva Linux 9.0 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 S.u.S.E. Linux Enterprise Server 8 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 9.0 x86_64 Linux kernel 2.4.20 CRUX CRUX Linux 1.0 Gentoo Linux 1.2 Gentoo Linux 1.4 RedHat Linux 9.0 i386 Slackware Linux 9.0 WOLK WOLK 4.4 s Linux kernel 2.4.19 Conectiva Linux 8.0 Conectiva Linux Enterprise Edition 1.0 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Multi Network Firewall 2.0 S.u.S.E. Linux 8.1 S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Enterprise Server 8 Slackware Linux current Linux kernel 2.4.18 Astaro Security Linux 2.0 16 Astaro Security Linux 2.0 23 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.2 RedHat Advanced Workstation for the Itanium Processor 2.1 RedHat Advanced Workstation for the Itanium Processor 2.1 IA64 RedHat Enterprise Linux AS 2.1 IA64 RedHat Linux 7.3 RedHat Linux 8.0 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.3 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.1 S.u.S.E. Linux Connectivity Server S.u.S.E. Linux Database Server S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Enterprise Server 8 S.u.S.E. Linux Firewall on CD S.u.S.E. Linux Office Server S.u.S.E. Linux Openexchange Server S.u.S.E. Linux Personal 8.2 S.u.S.E. SuSE eMail Server 3.1 S.u.S.E. SuSE eMail Server III Turbolinux Turbolinux Server 7.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Workstation 7.0 Turbolinux Turbolinux Workstation 8.0 Linux kernel 2.4.17 Linux kernel 2.4.16 Sun Cobalt RaQ 550 Linux kernel 2.4.15 Linux kernel 2.4.14 Linux kernel 2.4.13 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Workstation 3.1.1 Linux kernel 2.4.12 Conectiva Linux 7.0 Linux kernel 2.4.11 Linux kernel 2.4.10 S.u.S.E. Linux 7.3 Linux kernel 2.4.9 RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux AS 2.1 IA64 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux ES 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux WS 2.1 IA64 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 alpha RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 Sun Linux 5.0 Sun Linux 5.0.3 Sun Linux 5.0.5 Linux kernel 2.4.8 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.2 Linux kernel 2.4.7 RedHat Linux 7.2 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.2 Linux kernel 2.4.6 Linux kernel 2.4.5 Slackware Linux 8.0 Linux kernel 2.4.4 S.u.S.E. Linux 7.2 Linux kernel 2.4.3 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc Linux kernel 2.4.2 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 Linux kernel 2.4.1 Linux kernel 2.4
Not Vulnerable
Code	The following proof of concept exploit has been made available: /data/vulnerabilities/exploits/suiddmp.c
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 mvnForum Cross Site Scripting Vulnerability
2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability