CVE-2003-0018

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:P/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 19, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-00197.2uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network i CVE-2003-00205.0Apache does not filter terminal escape sequences from its error logs, which could make it easier for attackers to insert those sequences int CVE-2003-00215.0The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence w CVE-2003-00225.0The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is ech CVE-2003-00235.0The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequ CVE-2003-00247.5The menuBar feature in aterm 0.42 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequ CVE-2003-00257.5Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database activities and possi CVE-2003-00267.5Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCP CVE-2003-00275.0Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers t CVE-2003-00287.5Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived fr CVE-2003-003010.0Buffer overflows in protegrity.dll of Protegrity Secure.Data Extension Feature (SEF) before 2.2.3.9 allow attackers with SQL access to execu CVE-2003-00317.5Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).