CVE-2003-0476

CVE-2003-0476 describes a vulnerability in the Linux 2.4.x kernel where the execve system call inadvertently records the executable's file descriptor in the calling process's file table, potentially allowing local users to gain unauthorized read access to restricted file descriptors. This vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access, low attack complexity, and a potential impact of partial confidentiality. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.