PT-2002-1171 · Oracle · Cachefsd

Publicado 2002-03-07 · Atualizado 2018-10-30 · CVE-2002-0084

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions cachefsd versions 2.6 through 8

Description A buffer overflow issue exists in the fscache setup function of cachefsd, allowing local users to gain root privileges by providing a long mount argument.

Recommendations For versions 2.6 through 8, apply the necessary patch to fix the buffer overflow issue in the fscache setup function to prevent local users from gaining root privileges.

Correção

Identificadores relacionados

CVE-2002-0084

Produtos afetados

Cachefsd

Referências · 7

• http://kb.cert.org/vuls/id/161931 · Nota
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A43 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A97 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0084 · Nota de Segurança
• http://esecurityonline.com/advisories/eSO4198.asp · Aviso do Fabricante
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html · Nota