CVE-2003-0476

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-08-07 · updated 2026-06-16

Description

The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.

Affected products

Linux kernel: 2.4.0

References

http://marc.info/?l=bugtraq&m=105664924024009&w=2
http://www.debian.org/security/2004/dsa-358
http://www.debian.org/security/2004/dsa-423
http://www.mandriva.com/security/advisories?name=MDKSA-2003:074
http://www.redhat.com/support/errata/RHSA-2003-238.html
http://www.redhat.com/support/errata/RHSA-2003-368.html
http://www.redhat.com/support/errata/RHSA-2003-408.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A327
http://marc.info/?l=bugtraq&m=105664924024009&w=2
http://www.debian.org/security/2004/dsa-358
http://www.debian.org/security/2004/dsa-423
http://www.mandriva.com/security/advisories?name=MDKSA-2003:074

Get alerted when CVE-2003-0476 or the next vulnerability affects your stack