CVE-2003-0501

CVE-2003-0501 describes an information disclosure vulnerability in the Linux kernel's /proc filesystem, affecting versions 2.2.x and 2.4.x. A local attacker can exploit this by opening /proc/self entries before executing a setuid program, preventing the program from properly changing file ownership and permissions, thus exposing sensitive information. This vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access, low attack complexity, and a potential for partial confidentiality impact. While there is an ExploitDB entry (EDB-22813) detailing a proof-of-concept, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.