CVE-2003-1040: Low severity Linux Linux kernel vulnerability
Published Mar 23, 2004
·Updated
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.
Affected Software
1 affected component
Linux Linux kernel=2.4.0
Event History
Mar 23, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1040?
CVE-2003-1040 is considered a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2003-1040?
To fix CVE-2003-1040, you should upgrade the Linux kernel to a version that does not exhibit this vulnerability.
3
What systems are affected by CVE-2003-1040?
CVE-2003-1040 affects the Linux kernel version 2.4.0.
4
What consequences can arise from CVE-2003-1040?
The consequences of CVE-2003-1040 include potential crashes caused by local users sending specific signals to kmod.
5
Who can exploit CVE-2003-1040?
CVE-2003-1040 can be exploited by local users on the affected system.