CVE ID:	CVE-2003-0476
Description:	The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.
Test IDs:	1.3.6.1.4.1.25623.1.0.50963   1.3.6.1.4.1.25623.1.0.50964
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0476 Bugtraq: 20030626 Linux 2.4.x execve() file read race vulnerability (Google Search) http://marc.info/?l=bugtraq&m=105664924024009&w=2 Debian Security Information: DSA-358 (Google Search) http://www.debian.org/security/2004/dsa-358 Debian Security Information: DSA-423 (Google Search) http://www.debian.org/security/2004/dsa-423 http://www.mandriva.com/security/advisories?name=MDKSA-2003:074 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A327 RedHat Security Advisories: RHSA-2003:238 http://www.redhat.com/support/errata/RHSA-2003-238.html RedHat Security Advisories: RHSA-2003:368 http://www.redhat.com/support/errata/RHSA-2003-368.html RedHat Security Advisories: RHSA-2003:408 http://www.redhat.com/support/errata/RHSA-2003-408.html SuSE Security Announcement: SuSE-SA:2003:034 (Google Search)