CVE-2001-1384
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root...
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
Exploit likelihood
What each source reports
NVD Score used
7.2
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
- Record
CVE-2001-1384- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
- Record
CVE-2001-1384- Updated
- 2026-11-02
EUVDEUVD-2001-1364 No score
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
- Record
EUVD-2001-1364- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vqcp-3f72-59xm No score
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root...
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
- Record
GHSA-vqcp-3f72-59xm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.2/2.4 - Ptrace/Setuid Exec Privilege Escalation | 2001-10-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1384 is a high vulnerability (CVSS 7.2) in Linux Kernel, published October 18, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2001-130.html
download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01
linuxsecurity.com/advisories/other_advisory-1650.html
online.securityfocus.com/advisories/3713
marc.info?l=bugtraq&m=100343090106914&w=2
redhat.com/support/errata/RHSA-2001-129.html
Show 8 moreShow less
marc.info?l=bugtraq&m=100350685431610&w=2
iss.net/security_center/static/7311.php
novell.com/linux/security/advisories/2001_036_kernel_txt.html
linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3
securityfocus.com/bid/3447
linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3
nvd.nist.gov/vuln/detail/CVE-2001-1384
github.com/advisories/GHSA-vqcp-3f72-59xm