{"id":"CVE-2003-0019","aliases":["EUVD-2003-0019","GHSA-j663-gv7p-7947"],"status":"published","title":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges,...","description":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00885,"percentile":0.59488,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2003-02-19T05:00:00Z","modified":"2026-06-16T22:01:21Z","exploits":[{"source":"exploitdb","id":"EDB-22640","title":"UML_NET - Integer Mismanagement Code Execution","type":"local","platform":"linux","date":"2003-05-23","verified":true,"url":"https://www.exploit-db.com/exploits/22640"}],"products":[{"vendor":"redhat","product":"linux"}],"references":[{"url":"http://www.iss.net/security_center/static/11276.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/134025","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-044.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-056.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6801","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0019"},{"url":"https://github.com/advisories/GHSA-j663-gv7p-7947"}],"sources":{"cve":[{"id":"CVE-2003-0019","description":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T01:36:25.329Z","updated_at":"2026-11-02T14:20:16.757505Z"}],"euvd":[{"id":"EUVD-2003-0019","description":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T01:36:25Z","updated_at":"2026-11-03T01:15:09.64087Z"}],"ghsa":[{"id":"GHSA-j663-gv7p-7947","title":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges,...","description":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.","status":"published","published":"2022-04-29T01:25:40Z","modified":"2023-01-30T05:00:46Z","updated_at":"2026-11-02T14:46:16.34482Z"}],"nvd":[{"id":"CVE-2003-0019","description":"uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.","status":"published","published":"2003-02-19T05:00:00Z","modified":"2026-06-16T22:01:21.227Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}]}}