#VU95204 Security restrictions bypass in Linux kernel - CVE-2008-2148


| Updated: 2017-08-08

Vulnerability identifier: #VU95204

Vulnerability risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2008-2148

CWE-ID: CWE-264

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to manipulate or delete data.

The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

External links
https://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f9dfda1ad0637a89a64d001cf81478bd8d9b6306
https://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3
https://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
https://secunia.com/advisories/30198
https://secunia.com/advisories/30241
https://secunia.com/advisories/30818
https://secunia.com/advisories/31107
https://secunia.com/advisories/31628
https://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169
https://www.mandriva.com/security/advisories?name=MDVSA-2008:167
https://www.redhat.com/support/errata/RHSA-2008-0585.html
https://www.securityfocus.com/bid/29134
https://www.ubuntu.com/usn/usn-625-1
https://www.vupen.com/english/advisories/2008/1543/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42342

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Security restrictions bypass in Linux kernel