← back
CVE-2003-0461

CVE-2003-0461

EPSS 0.4%
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9330https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A997http://www.debian.org/security/2004/dsa-358http://www.debian.org/security/2004/dsa-423http://www.redhat.com/support/errata/RHSA-2003-238.htmlhttp://www.redhat.com/support/errata/RHSA-2004-188.html