PT-2008-1048 · Linux+1 · Linux Kernel+1
Eugene Teo
·
Publicado
2008-09-29
·
Atualizado
2017-09-29
·
CVE-2008-4210
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Red Hat Enterprise Linux kernel versions 2.4.9 through 2.4.18
Linux kernel versions prior to 2.6.22
Description
The issue concerns multiple vulnerabilities in the Linux kernel of Red Hat Enterprise Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Local users may also gain privileges of a different group or obtain sensitive information by creating an executable file in a setgid directory through the truncate or ftruncate function in conjunction with memory-mapped I/O.
Recommendations
For Red Hat Enterprise Linux kernel versions 2.4.9 through 2.4.18, update to a version that includes the necessary security patches.
For Linux kernel versions prior to 2.6.22, update to version 2.6.22 or later to resolve the issue.
As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat