CVE-2001-1384

ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01
• http://marc.info/?l=bugtraq&m=100343090106914&w=2
• http://marc.info/?l=bugtraq&m=100350685431610&w=2
• http://online.securityfocus.com/advisories/3713
• http://www.iss.net/security_center/static/7311.phpPatch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3
• http://www.linuxsecurity.com/advisories/other_advisory-1650.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html
• http://www.redhat.com/support/errata/RHSA-2001-129.html
• http://www.redhat.com/support/errata/RHSA-2001-130.html
• http://www.securityfocus.com/bid/3447
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01
• http://marc.info/?l=bugtraq&m=100343090106914&w=2
• http://marc.info/?l=bugtraq&m=100350685431610&w=2
• http://online.securityfocus.com/advisories/3713
• http://www.iss.net/security_center/static/7311.phpPatch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3
• http://www.linuxsecurity.com/advisories/other_advisory-1650.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html
• http://www.redhat.com/support/errata/RHSA-2001-129.html
• http://www.redhat.com/support/errata/RHSA-2001-130.html
• http://www.securityfocus.com/bid/3447

Published

Oct 18, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1377Multiple RADIUS implementations do not properly validate the…
• CVE-2001-1378fetchmailconf in fetchmail before 5.7.4 allows local users t…
• CVE-2001-1379The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9…
• CVE-2001-1380OpenSSH before 2.9.9, while using keypairs and multiple keys…
• CVE-2001-1382The "echo simulation" traffic analysis countermeasure in Ope…
• CVE-2001-1383initscript in setserial 2.17-4 and earlier uses predictable …
• CVE-2001-1385The Apache module for PHP 4.0.0 through PHP 4.0.4, when disa…
• CVE-2001-1386WFTPD 3.00 allows remote attackers to read arbitrary files b…7.5
• CVE-2001-1387iptables-save in iptables before 1.2.4 records the "--reject…
• CVE-2001-1388iptables before 1.2.4 does not accurately convert rate limit…
• CVE-2001-1389Multiple vulnerabilities in xinetd 2.3.0 and earlier, and ad…
• CVE-2001-1390Unknown vulnerability in binfmt_misc in the Linux kernel bef…