CVE-2002-1826 : grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only

grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory.

Published 2002-12-31 05:00:00

Updated 2008-09-05 20:31:37

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2002-1826

Grsecurity » Grsecurity Kernel Patch » Version: 1.9.4
cpe:2.3:a:grsecurity:grsecurity_kernel_patch:1.9.4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2002-1826

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-1826

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2002-1826

http://www.securityfocus.com/bid/4762

Exploit
http://www.iss.net/security_center/static/9109.php

Jump to

Vulnerability Details : CVE-2002-1826

Products affected by CVE-2002-1826

Exploit prediction scoring system (EPSS) score for CVE-2002-1826

CVSS scores for CVE-2002-1826

References for CVE-2002-1826