CVE

Id
48918  
CVE No.
CVE-2011-1006  
Status
Candidate  
Description
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.  
Phase
Assigned (20110214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
531242 48918 CVE-2011-1006 CONFIRM:http://libcg.git.sourceforge.net/git/gitweb.cgi?p=libcg/libcg;a=commit;h=5ae8aea1ecd60c439121d3329d8eaabf13d292c1  View
531243 48918 CVE-2011-1006 CONFIRM:http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download  View
531244 48918 CVE-2011-1006 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=678107  View
531245 48918 CVE-2011-1006 DEBIAN:DSA-2193  View
531246 48918 CVE-2011-1006 URL:http://www.debian.org/security/2011/dsa-2193  View
531247 48918 CVE-2011-1006 FEDORA:FEDORA-2011-2631  View
531248 48918 CVE-2011-1006 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html  View
531249 48918 CVE-2011-1006 FEDORA:FEDORA-2011-2638  View
531250 48918 CVE-2011-1006 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html  View
531251 48918 CVE-2011-1006 REDHAT:RHSA-2011:0320  View
531252 48918 CVE-2011-1006 URL:http://www.redhat.com/support/errata/RHSA-2011-0320.html  View
531253 48918 CVE-2011-1006 SUSE:openSUSE-SU-2011:0316  View
531254 48918 CVE-2011-1006 URL:http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html  View
531255 48918 CVE-2011-1006 BID:46729  View
531256 48918 CVE-2011-1006 URL:http://www.securityfocus.com/bid/46729  View
531257 48918 CVE-2011-1006 SECTRACK:1025158  View
531258 48918 CVE-2011-1006 URL:http://www.securitytracker.com/id?1025158  View
531259 48918 CVE-2011-1006 SECUNIA:43611  View
531260 48918 CVE-2011-1006 URL:http://secunia.com/advisories/43611  View
531261 48918 CVE-2011-1006 SECUNIA:43758  View
531262 48918 CVE-2011-1006 URL:http://secunia.com/advisories/43758  View
531263 48918 CVE-2011-1006 SECUNIA:43891  View
531264 48918 CVE-2011-1006 URL:http://secunia.com/advisories/43891  View
531265 48918 CVE-2011-1006 SECUNIA:44093  View
531266 48918 CVE-2011-1006 URL:http://secunia.com/advisories/44093  View
531267 48918 CVE-2011-1006 VUPEN:ADV-2011-0679  View
531268 48918 CVE-2011-1006 URL:http://www.vupen.com/english/advisories/2011/0679  View
531269 48918 CVE-2011-1006 VUPEN:ADV-2011-0774  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31209 JVNDB-2011-001449 policycoreutils パッケージの seunshare_mount 関数における権限を取得される脆弱性 policycoreutils パッケージの seunshare 内にある sandbox/seunshare.c のseunshare_mount 関数は、root の所有権およびスティッキービットの割り当てをしないまま /tmp トップ上にある新規ディレクトリのマウント処理を行うため、任意の /tmp ファイルを置き換えられたり、削除され、サービス運用妨害 (DoS) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2011-1011 48918 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001449.html  View