CVE-2003-0246

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-06-16 · updated 2026-06-16

Description

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

Affected products

Linux kernel: 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5 (+85)

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0076.html
http://marc.info/?l=bugtraq&m=105301461726555&w=2
http://www.debian.org/security/2003/dsa-311
http://www.debian.org/security/2003/dsa-312
http://www.debian.org/security/2003/dsa-332
http://www.debian.org/security/2003/dsa-336
http://www.debian.org/security/2004/dsa-442
http://www.mandriva.com/security/advisories?name=MDKSA-2003:066
http://www.mandriva.com/security/advisories?name=MDKSA-2003:074
http://www.redhat.com/support/errata/RHSA-2003-147.html
http://www.redhat.com/support/errata/RHSA-2003-172.html
http://www.turbolinux.com/security/TLSA-2003-41.txt

Get alerted when CVE-2003-0246 or the next vulnerability affects your stack