CVE-2003-0461
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial...
2.1 LowFix available
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
Exploit likelihood
0.41%Down 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
- Record
CVE-2003-0461- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
- Record
CVE-2003-0461- Updated
- 2026-11-02
EUVDEUVD-2003-0455 No score
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
- Record
EUVD-2003-0455- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8x73-xrpj-qfx7 No score
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial...
/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.
- Record
GHSA-8x73-xrpj-qfx7- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-11 | 2.4.18-11 |
kernel-image-2.4.18-1-i386Debian:3.0 |
before 2.4.18-9 | 2.4.18-9 |
kernel-image-2.4.18-i386bfDebian:3.0 |
before 2.4.18-5woody2, plus listed versions 2.4.18-5 |
2.4.18-5woody2 |
kernel-image-2.4.18-1-alphaDebian:3.0 |
before 2.4.18-8 | 2.4.18-8 |
kernel-image-2.4.17-ia64Debian:3.0 |
before kernel-image-2.4.17-ia64 | kernel-image-2.4.17-ia64 |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-15.EL | 0:2.4.21-15.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0461 is a low vulnerability (CVSS 2.1) in Redhat Linux, published July 25, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in kernel-source-2.4.18 2.4.18-11.
References
redhat.com/support/errata/RHSA-2003-238.html
debian.org/security/2004/dsa-423
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A304
rsbac.dyndns.org/pipermail/rsbac/2002-May/000162.html
Show 90 moreShow less
nvd.nist.gov/vuln/detail/CVE-2003-0461
github.com/advisories/GHSA-8x73-xrpj-qfx7
access.redhat.com/errata/RHSA-2004:188
bugzilla.redhat.com/show_bug.cgi?id=102194
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_188.json
cve.org/CVERecord?id=CVE-2003-0461