Linux: >> Linux Kernel >> 2.5.36 Security Vulnerabilities
The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.
CVSS Score
3.6
EPSS Score
0.001
Published
2003-06-16
The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names.
CVSS Score
5.0
EPSS Score
0.005
Published
1999-01-01
Page 342