PT-2010-2862 · Linux · Linux Kernel

Matt Mccutchen · Publicado 2010-04-12 · Atualizado 2024-06-15 · CVE-2010-1146

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.33.2 and earlier

Description The issue allows local users to gain privileges by modifying extended attributes or ACLs when a ReiserFS filesystem exists. This can be achieved by deleting a file under .reiserfs priv/xattrs/.

Recommendations For Linux kernel versions 2.6.33.2 and earlier, restrict read or write access to the .reiserfs priv directory to prevent local users from gaining privileges.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-1146

OPENSUSE-SU-2024:10128-1

Produtos afetados

Linux Kernel

Referências · 92

• 🔥 https://exploit-db.com/exploits/12130 · Exploit
• 🔥 http://securityfocus.com/bid/39344 · Exploit
• 🔥 http://exploit-db.com/exploits/12130 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=568041 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57782 · Nota
• https://suse.com/security/cve/CVE-2016-3134 · Nota
• https://suse.com/security/cve/CVE-2014-0196 · Nota
• https://suse.com/security/cve/CVE-2010-2066 · Nota
• https://suse.com/security/cve/CVE-2011-1581 · Nota
• https://suse.com/security/cve/CVE-2013-2850 · Nota
• https://suse.com/security/cve/CVE-2016-7042 · Nota
• https://suse.com/security/cve/CVE-2016-7425 · Nota
• https://suse.com/security/cve/CVE-2016-4578 · Nota
• https://suse.com/security/cve/CVE-2016-6828 · Nota
• https://suse.com/security/cve/CVE-2010-3298 · Nota