PT-2008-4369 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2008-07-09 · Updated 2023-02-13 · CVE-2008-2931

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.22

Description The issue concerns the do change type function in fs/namespace.c, which does not properly verify the caller's capabilities. This allows local users to potentially gain privileges or cause a denial of service by modifying mountpoint properties.

Recommendations For versions prior to 2.6.22, update to version 2.6.22 or later to resolve the issue.

Fix

DoS

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2008-2931

DSA-1630-1

RHSA-2008:0885

RHSA-2008_0885

Affected Products

Linux Kernel

Red Hat

References · 51

• https://bdu.fstec.ru/vul/2015-02639 · Security Note
• https://bdu.fstec.ru/vul/2015-05016 · Security Note
• https://bdu.fstec.ru/vul/2015-05017 · Security Note
• https://bdu.fstec.ru/vul/2015-06272 · Security Note
• https://bdu.fstec.ru/vul/2015-06269 · Security Note
• https://bdu.fstec.ru/vul/2015-06237 · Security Note
• https://bdu.fstec.ru/vul/2015-06257 · Security Note
• https://bdu.fstec.ru/vul/2015-06253 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-2931 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05015 · Security Note
• https://bdu.fstec.ru/vul/2015-06274 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html · Vendor Advisory
• https://usn.ubuntu.com/637-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html · Vendor Advisory