PT-2008-1048 · Linux+1 · Linux Kernel+1
Eugene Teo
·
Published
2008-09-29
·
Updated
2017-09-29
·
CVE-2008-4210
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Red Hat Enterprise Linux kernel versions 2.4.9 through 2.4.18
Linux kernel versions prior to 2.6.22
Description
The issue concerns multiple vulnerabilities in the Linux kernel of Red Hat Enterprise Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Local users may also gain privileges of a different group or obtain sensitive information by creating an executable file in a setgid directory through the truncate or ftruncate function in conjunction with memory-mapped I/O.
Recommendations
For Red Hat Enterprise Linux kernel versions 2.4.9 through 2.4.18, update to a version that includes the necessary security patches.
For Linux kernel versions prior to 2.6.22, update to version 2.6.22 or later to resolve the issue.
As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat