CVE-2003-0643

Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).

Published Bycve@mitre.org

Published DateJul 25, 2003, 04:00

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

2.1

Vector String

AV:L/AC:L/Au:N/C:N/I:N/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

PARTIAL

References

http://ftp.belnet.be/linux/gentoo-portage/sys-kernel/gentoo-sources/files/gentoo-sources-2.4.CAN-2003-0643.patch
http://gentoo.kems.net/gentoo-x86-portage/sys-kernel/gentoo-sources/ChangeLog
http://mirror.clarkson.edu/pub/distributions/gentoo-portage/sys-kernel/wolk-sources/ChangeLog
http://secunia.com/advisories/23265
http://www.ultramonkey.org/bugs/cve-patch/CAN-2003-0643.patch
http://www.ultramonkey.org/bugs/cve/CAN-2003-0643.shtml
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

2.1

Vector String

AV:L/AC:L/Au:N/C:N/I:N/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

PARTIAL