PT-2010-1833 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2010-01-19 · Updated 2023-02-13 · CVE-2010-0007

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.33-rc4

Description The issue allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering. This is due to the ebtables module in the netfilter framework not requiring the CAP NET ADMIN capability for setting or modifying rules.

Recommendations For Linux kernel versions prior to 2.6.33-rc4, update to version 2.6.33-rc4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ebtables module to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0007

DSA-1996-1

DSA-2003-1

DSA-2005-1

RHSA-2010:0146

RHSA-2010:0147

RHSA-2010:0161

RHSA-2010_0146

RHSA-2010_0147

Affected Products

Linux Kernel

Red Hat

References · 45

• http://vupen.com/english/advisories/2010/0109 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0146.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05250 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0147.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:051 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05251 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html · Vendor Advisory
• http://debian.org/security/2010/dsa-1996 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0007 · Security Note
• http://debian.org/security/2010/dsa-2005 · Vendor Advisory
• http://secunia.com/advisories/38133 · Vendor Advisory