{"vuid":"VU#628849","idnumber":"628849","name":"ptrace contains vulnerability allowing for local root compromise","keywords":["ptrace","local root","Linux 2.2","Linux 2.4"],"overview":"A vulnerability in the Linux 2.2 and 2.4 distributions of ptrace() may permit a local attacker to gain elevated privileges.","clean_desc":"The Linux 2.2 and 2.4 kernels contained  a flaw in ptrace(). This vulnerability may permit a local user to have the kernel spawn a child process. From the man page: The ptrace system call provides a means by which a parent  process  may observe  and  control the execution of another process, and examine and change its core image and registers. It is primarily used to implement breakpoint debugging and system call tracing. If the kernel is built with modules and kernel module loader enabled and /proc/sys/kernel/modprobe contains the path to a valid executable and ptrace() calls are not blocked, then a local user may be able to exploit this vulnerability to gain root privileges to the system. The CERT/CC has seen active exploitation of this vulnerability.","impact":"A local user can exploit this vulnerability to gain elevated privileges, typically root.","resolution":"This vulnerability has been resolved in  Linux 2.2.25 and 2.4.21. Various vendors have also released advisories and updates. Please see the your vendor's advisory for more details.","workarounds":"","sysaffected":"","thanks":"Thanks to Andrzej Szombierski for reporting this vulnerability.","author":"This document was written by Jason A Rafail and is based on information provided by Andrzej Szombierski.","public":["h","t","t","p",":","/","/","w","w","w",".","s","e","c","u","r","i","t","y","f","o","c","u","s",".","c","o","m","/","b","i","d","/","7","1","1","2"],"cveids":["CVE-2003-0127"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2003-03-17T19:07:58Z","publicdate":"2003-03-17T00:00:00Z","datefirstpublished":"2004-04-16T19:08:59Z","dateupdated":"2004-04-30T18:44:04Z","revision":9,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"20","cam_exploitation":"8","cam_internetinfrastructure":"10","cam_population":"10","cam_impact":"20","cam_easeofexploitation":"10","cam_attackeraccessrequired":"10","cam_scorecurrent":"14.25","cam_scorecurrentwidelyknown":"14.25","cam_scorecurrentwidelyknownexploited":"18.75","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":14.25,"vulnote":null}