CVE

Id
32265  
CVE No.
CVE-2008-2148  
Status
Candidate  
Description
The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.  
Phase
Assigned (20080512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348513 32265 CVE-2008-2148 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f9dfda1ad0637a89a64d001cf81478bd8d9b6306  View
348514 32265 CVE-2008-2148 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3  View
348515 32265 CVE-2008-2148 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169  View
348516 32265 CVE-2008-2148 MANDRIVA:MDVSA-2008:167  View
348517 32265 CVE-2008-2148 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:167  View
348518 32265 CVE-2008-2148 REDHAT:RHSA-2008:0585  View
348519 32265 CVE-2008-2148 URL:http://www.redhat.com/support/errata/RHSA-2008-0585.html  View
348520 32265 CVE-2008-2148 SUSE:SUSE-SA:2008:030  View
348521 32265 CVE-2008-2148 URL:http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html  View
348522 32265 CVE-2008-2148 UBUNTU:USN-625-1  View
348523 32265 CVE-2008-2148 URL:http://www.ubuntu.com/usn/usn-625-1  View
348524 32265 CVE-2008-2148 BID:29134  View
348525 32265 CVE-2008-2148 URL:http://www.securityfocus.com/bid/29134  View
348526 32265 CVE-2008-2148 VUPEN:ADV-2008-1543  View
348527 32265 CVE-2008-2148 URL:http://www.vupen.com/english/advisories/2008/1543/references  View
348528 32265 CVE-2008-2148 SECUNIA:30198  View
348529 32265 CVE-2008-2148 URL:http://secunia.com/advisories/30198  View
348530 32265 CVE-2008-2148 SECUNIA:30241  View
348531 32265 CVE-2008-2148 URL:http://secunia.com/advisories/30241  View
348532 32265 CVE-2008-2148 SECUNIA:30818  View
348533 32265 CVE-2008-2148 URL:http://secunia.com/advisories/30818  View
348534 32265 CVE-2008-2148 SECUNIA:31107  View
348535 32265 CVE-2008-2148 URL:http://secunia.com/advisories/31107  View
348536 32265 CVE-2008-2148 SECUNIA:31628  View
348537 32265 CVE-2008-2148 URL:http://secunia.com/advisories/31628  View
348538 32265 CVE-2008-2148 XF:linux-kernel-sysutimensat-dos(42342)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46149 JVNDB-2008-001459 OpenOffice.org (OOo) の rtl_allocateMemory 関数における整数オーバーフローの脆弱性 OpenOffice.org (OOo) の sal/rtl/source/alloc_global.c にある rtl_allocateMemory 関数には、ファイルの処理に不備があり、整数オーバーフローの脆弱性が存在します。 CVE-2008-2152 32265 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001459.html  View