PT-2010-4080 · Linux+1 · Linux Kernel+1

Eugene Teo

·

Publicado

2010-08-10

·

Atualizado

2023-02-13

·

CVE-2010-2524

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.35
Description The issue is related to the DNS resolution functionality in the CIFS implementation. It relies on a user's keyring for the dns resolver upcall in the cifs.upcall userspace helper, allowing local users to spoof DNS query results and perform arbitrary CIFS mounts. This is related to a "cache stuffing" issue and MS-DFS referrals.
Recommendations For Linux kernel versions prior to 2.6.35, update to version 2.6.35 or later to resolve the issue. As a temporary workaround, consider restricting access to the cifs.upcall userspace helper to minimize the risk of exploitation. Avoid using the add key call in the affected functionality until the issue is resolved.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2010-2524
DSA-2264-1
RHSA-2010:0610
RHSA-2010_0610

Produtos afetados

Linux Kernel
Red Hat