CVE-2003-0461

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-08-27 · updated 2026-06-16

Description

/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.

Affected products

RedHat Linux: 7.1, 7.2, 7.3, 8.0, 9.0

References

http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html
http://www.debian.org/security/2004/dsa-358
http://www.debian.org/security/2004/dsa-423
http://www.redhat.com/support/errata/RHSA-2003-238.html
http://www.redhat.com/support/errata/RHSA-2004-188.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9330
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A997
http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html
http://www.debian.org/security/2004/dsa-358
http://www.debian.org/security/2004/dsa-423
http://www.redhat.com/support/errata/RHSA-2003-238.html

Get alerted when CVE-2003-0461 or the next vulnerability affects your stack