CVE-2003-0396: Linux-ATM

Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days.

Buffer overflow in les for ATM on Linux (linux-atm) before 2.4.1, if used setuid, allows local users to gain privileges via a long -f command line argument.

Affected products

• Linux-ATM Linux-ATM: version 2.4 only

Published 2003-07-02. Last modified 2026-06-16.