CVE-2003-0461: Red Hat Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such as the length of passwords.

Affected products

• Red Hat Linux: version 7.1 only; version 7.2 only; version 7.3 only; version 8.0 only; version 9.0 only

Published 2003-08-27. Last modified 2026-06-16.