PT-2001-2061 · Linux · Linux Kernel

Publicado 2001-10-18 · Atualizado 2018-09-20 · CVE-2001-0907

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.2.1 through 2.2.19 Linux kernel versions 2.4.1 through 2.4.10

Description The issue allows local users to cause a denial of service by creating a series of deeply nested symlinks. This causes the kernel to spend extra time when trying to access the link, leading to a denial of service.

Recommendations For Linux kernel versions 2.2.1 through 2.2.19, consider restricting access to the symlink creation functionality to minimize the risk of exploitation. For Linux kernel versions 2.4.1 through 2.4.10, consider implementing measures to limit the depth of nested symlinks to prevent the kernel from spending extra time accessing the links.

Exploit

Correção

Identificadores relacionados

CVE-2001-0907

Produtos afetados

Linux Kernel

Referências · 12

• 🔥 https://exploit-db.com/exploits/21122 · Exploit
• http://iss.net/security_center/static/7312.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0907 · Nota de Segurança
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3 · Aviso do Fabricante
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=100350685431610&w=2 · Nota
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt · Aviso do Fabricante
• http://securityfocus.com/bid/3444 · Nota
• http://linuxsecurity.com/advisories/other_advisory-1650.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2001_036_kernel_txt.html · Aviso do Fabricante
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=100343090106914&w=2 · Nota