{"id":"CVE-2003-0476","aliases":["DSA-358","DSA-358-1","DSA-423","EUVD-2003-0470","GHSA-7g77-p258-35hg"],"status":"published","title":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in...","description":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00406,"percentile":0.35115,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-06-28T04:00:00Z","modified":"2026-06-16T22:02:16Z","affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-source-2.4.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-11"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-1-i386","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-9"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-i386bf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-5woody2"}]}],"versions":["2.4.18-5"],"bundled":10},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.18-1-alpha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-8"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:3.0","package":"kernel-image-2.4.17-ia64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"kernel-image-2.4.17-ia64"}]}],"bundled":12}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A327","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=105664924024009\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-238.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-423","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:074","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-408.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2004/dsa-358","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-368.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0476"},{"url":"https://github.com/advisories/GHSA-7g77-p258-35hg"}],"sources":{"cve":[{"id":"CVE-2003-0476","description":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.","status":"published","published":"2003-06-28T04:00:00Z","modified":"2024-08-08T01:58:10.888Z","updated_at":"2026-11-02T14:20:17.11067Z"}],"euvd":[{"id":"EUVD-2003-0470","description":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.","status":"published","published":"2003-06-28T04:00:00Z","modified":"2024-08-08T01:58:10Z","updated_at":"2026-11-03T01:15:07.267875Z"}],"ghsa":[{"id":"GHSA-7g77-p258-35hg","title":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in...","description":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.","status":"published","published":"2022-04-29T01:26:30Z","modified":"2023-01-30T05:01:23Z","updated_at":"2026-11-02T14:46:24.052847Z"}],"nvd":[{"id":"CVE-2003-0476","description":"The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.","status":"published","published":"2003-08-07T04:00:00Z","modified":"2026-06-16T22:02:16.683Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}],"osv":[{"id":"DSA-358","title":"linux-kernel-2.4.18 - several vulnerabilities","status":"withdrawn","published":"2003-07-31T00:00:00Z","modified":"2025-05-26T07:14:09.690963Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-358-1","title":"linux-kernel-2.4.18 - several vulnerabilities","status":"published","published":"2003-07-31T00:00:00Z","modified":"2026-03-09T01:23:20.555745Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-423","title":"linux-kernel-2.4.17-ia64 - several vulnerabilities","status":"published","published":"2004-01-15T00:00:00Z","modified":"2026-03-09T02:10:32.926393Z","updated_at":"2026-11-02T15:46:16.862196Z"}]}}