JVN Info.

Id
44150  
Name
JVNDB-2009-005157  
Title
Linux kernel の ext4 ファイルシステムにおける任意のファイルを上書きをされる脆弱性  
Summary
Linux kernel の ext4 ファイルシステムの EXT4_IOC_MOVE_EXT ioctl 実装は、ファイルのパーミッションを十分にチェックしない不備があるため、任意のファイルを上書きをされる脆弱性が存在します。  
Nvdinfo
CVE-2009-4131  
Cvssv2
7.2  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005157.html  
Published Date
2009-12-12  
Registered Date
2012-09-25  
Last Updated Date
2012-09-25  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51411 H28_MUN_DWEB_Q4_172_16_240_seg.csv 44150 89665 CVE-2012-2337 7.2 High 172.16.240.115 tcp 443 VMware ESX sudo Package Multiple Vulnerabilities (VMSA-2013-0007) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities in the bundled version of sudo : - An unspecified flaw exists in the sudo package related to the Network Matching Mechanism that is triggered when parsing IPv4 netmask hosts. A local attacker can exploit this to execute arbitrary code. (CVE-2012-2337) - An arbitrary file overwrite vulnerability exists in sudo due to a race condition occurs in post-uninstall during the upgrade or removal of sudo packages. A local attacker can exploit this via a symlink attack against the /var/tmp/nsswitch.conf.bak file, allowing the attacker write to a specified file. (CVE-2012-3440) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2013-0007 Version : 4.0 Installed build : 208167 Fixed build : 1070634
56992 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 44150 89665 CVE-2012-2337 7.2 High 172.16.240.115 tcp 443 VMware ESX sudo Package Multiple Vulnerabilities (VMSA-2013-0007) (remote check) The remote VMware ESX / ESXi host is missing a security-related patch. The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities in the bundled version of sudo : - An unspecified flaw exists in the sudo package related to the Network Matching Mechanism that is triggered when parsing IPv4 netmask hosts. A local attacker can exploit this to execute arbitrary code. (CVE-2012-2337) - An arbitrary file overwrite vulnerability exists in sudo due to a race condition occurs in post-uninstall during the upgrade or removal of sudo packages. A local attacker can exploit this via a symlink attack against the /var/tmp/nsswitch.conf.bak file, allowing the attacker write to a specified file. (CVE-2012-3440) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 4.0 / 4.1. https://www.vmware.com/security/advisories/VMSA-2013-0007 Version : 4.0 Installed build : 208167 Fixed build : 1070634