CVE-2003-0194: Medium severity redhat Tcpdump vulnerability
Published May 17, 2003
·Updated
tcpdump does not properly drop privileges to the pcap user when starting up.
Affected Software
11 affected components
redhat Tcpdump=3.4-39
redhat Tcpdump=3.6.2-9
redhat Tcpdump=3.6.2-9
redhat Tcpdump=3.6.2-12
redhat Tcpdump=3.6.3-3
redhat Tcpdump=3.7.2-1
redhat Linux=7.1
redhat Linux=7.2
redhat Linux=7.3
redhat Linux=8.0
redhat Linux=9.0
Remediation
Patch Available
Event History
May 17, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Jun 9, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0194?
The severity of CVE-2003-0194 is considered moderate due to improper privilege management in tcpdump.
2
How do I fix CVE-2003-0194?
To fix CVE-2003-0194, you should upgrade tcpdump to a version that addresses this privilege escalation vulnerability.
3
Which versions of tcpdump are affected by CVE-2003-0194?
Affected versions of tcpdump include 3.4-39, 3.6.2-9, 3.6.2-12, 3.6.3-3, and 3.7.2-1.
4
What systems are vulnerable to CVE-2003-0194?
Vulnerable systems include Red Hat Linux versions 7.1, 7.2, 7.3, 8.0, and 9.0 when running affected tcpdump versions.
5
Is there a workaround for CVE-2003-0194?
A temporary workaround for CVE-2003-0194 includes running tcpdump with lower privileges, but upgrading is strongly recommended.