PT-2008-4369 · Linux+1 · Linux Kernel+1

Eugene Teo · CVE-2008-2931 · Publicado 2008-07-09 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.22

Description The issue concerns the do change type function in fs/namespace.c, which does not properly verify the caller's capabilities. This allows local users to potentially gain privileges or cause a denial of service by modifying mountpoint properties.

Recommendations For versions prior to 2.6.22, update to version 2.6.22 or later to resolve the issue.

Correção

DoS

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2008-2931

DSA-1630-1

RHSA-2008:0885

RHSA-2008_0885

Produtos afetados

Linux Kernel

Red Hat

Referências · 51

• https://access.redhat.com/security/cve/CVE-2007-6417 · Nota
• http://debian.org/security/2008/dsa-1630 · Correção, Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2008:0885 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10437 · Nota
• https://bdu.fstec.ru/vul/2015-02639 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2008-3272 · Nota
• https://bdu.fstec.ru/vul/2015-05016 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05017 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06272 · Nota de Segurança
• http://securityfocus.com/bid/30126 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 · Nota
• http://openwall.com/lists/oss-security/2008/07/08/4 · Nota
• https://bdu.fstec.ru/vul/2015-06269 · Nota de Segurança
• http://secunia.com/advisories/30982 · Nota
• https://bdu.fstec.ru/vul/2015-06237 · Nota de Segurança