CVE

Id
30118  
CVE No.
CVE-2008-0001  
Status
Candidate  
Description
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.  
Phase
Assigned (20071203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
318480 30118 CVE-2008-0001 BUGTRAQ:20080117 rPSA-2008-0021-1 kernel  View
318481 30118 CVE-2008-0001 URL:http://www.securityfocus.com/archive/1/archive/1/486485/100/0/threaded  View
318482 30118 CVE-2008-0001 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14  View
318483 30118 CVE-2008-0001 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=974a9f0b47da74e28f68b9c8645c3786aa5ace1a  View
318484 30118 CVE-2008-0001 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16  View
318485 30118 CVE-2008-0001 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0021  View
318486 30118 CVE-2008-0001 CONFIRM:https://issues.rpath.com/browse/RPL-2146  View
318487 30118 CVE-2008-0001 DEBIAN:DSA-1479  View
318488 30118 CVE-2008-0001 URL:http://www.debian.org/security/2008/dsa-1479  View
318489 30118 CVE-2008-0001 FEDORA:FEDORA-2008-0748  View
318490 30118 CVE-2008-0001 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00828.html  View
318491 30118 CVE-2008-0001 MANDRIVA:MDVSA-2008:044  View
318492 30118 CVE-2008-0001 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:044  View
318493 30118 CVE-2008-0001 MANDRIVA:MDVSA-2008:112  View
318494 30118 CVE-2008-0001 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:112  View
318495 30118 CVE-2008-0001 REDHAT:RHSA-2008:0089  View
318496 30118 CVE-2008-0001 URL:http://www.redhat.com/support/errata/RHSA-2008-0089.html  View
318497 30118 CVE-2008-0001 REDHAT:RHSA-2008:0055  View
318498 30118 CVE-2008-0001 URL:http://rhn.redhat.com/errata/RHSA-2008-0055.html  View
318499 30118 CVE-2008-0001 SUSE:SUSE-SA:2008:006  View
318500 30118 CVE-2008-0001 URL:http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html  View
318501 30118 CVE-2008-0001 SUSE:SUSE-SA:2008:013  View
318502 30118 CVE-2008-0001 URL:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html  View
318503 30118 CVE-2008-0001 UBUNTU:USN-574-1  View
318504 30118 CVE-2008-0001 URL:http://www.ubuntu.com/usn/usn-574-1  View
318505 30118 CVE-2008-0001 UBUNTU:USN-578-1  View
318506 30118 CVE-2008-0001 URL:http://www.ubuntu.com/usn/usn-578-1  View
318507 30118 CVE-2008-0001 BID:27280  View
318508 30118 CVE-2008-0001 URL:http://www.securityfocus.com/bid/27280  View
318509 30118 CVE-2008-0001 OVAL:oval:org.mitre.oval:def:9709  View
318510 30118 CVE-2008-0001 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9709  View
318511 30118 CVE-2008-0001 VUPEN:ADV-2008-0151  View
318512 30118 CVE-2008-0001 URL:http://www.vupen.com/english/advisories/2008/0151  View
318513 30118 CVE-2008-0001 SECTRACK:1019289  View
318514 30118 CVE-2008-0001 URL:http://securitytracker.com/id?1019289  View
318515 30118 CVE-2008-0001 SECUNIA:28485  View
318516 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28485  View
318517 30118 CVE-2008-0001 SECUNIA:28558  View
318518 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28558  View
318519 30118 CVE-2008-0001 SECUNIA:28628  View
318520 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28628  View
318521 30118 CVE-2008-0001 SECUNIA:28664  View
318522 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28664  View
318523 30118 CVE-2008-0001 SECUNIA:28626  View
318524 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28626  View
318525 30118 CVE-2008-0001 SECUNIA:28748  View
318526 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28748  View
318527 30118 CVE-2008-0001 SECUNIA:28706  View
318528 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28706  View
318529 30118 CVE-2008-0001 SECUNIA:28806  View
318530 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28806  View
318531 30118 CVE-2008-0001 SECUNIA:28971  View
318532 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28971  View
318533 30118 CVE-2008-0001 SECUNIA:28643  View
318534 30118 CVE-2008-0001 URL:http://secunia.com/advisories/28643  View
318535 30118 CVE-2008-0001 SECUNIA:29245  View
318536 30118 CVE-2008-0001 URL:http://secunia.com/advisories/29245  View
318537 30118 CVE-2008-0001 XF:linux-directory-security-bypass(39672)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45720 JVNDB-2008-001030 Apache の mod_proxy_ftp における UTF-7 エンコードに関するクロスサイトスクリプティングの脆弱性 Apache の mod_proxy_ftp には、charset が定義されていないため、UTF-7 エンコードを用いたクロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0005 30118 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001030.html  View