NVD

Id
1  
Name
CVE-2008-0001  
Description
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-01-15  
Modified Date
2012-03-19  
Seq
2008-0001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1 1 CVE-2008-0001 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=974a9f0b47da74e28f68b9c8645c3786aa5ace1a  View
2 1 CVE-2008-0001 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.16  View
3 1 CVE-2008-0001 SUSE-SA:2008:006  View
4 1 CVE-2008-0001 SUSE-SA:2008:013  View
5 1 CVE-2008-0001 oval:org.mitre.oval:def:9709  View
6 1 CVE-2008-0001 RHSA-2008:0055  View
7 1 CVE-2008-0001 1019289  View
8 1 CVE-2008-0001 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0021  View
9 1 CVE-2008-0001 DSA-1479  View
10 1 CVE-2008-0001 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14  View
11 1 CVE-2008-0001 MDVSA-2008:044  View
12 1 CVE-2008-0001 MDVSA-2008:112  View
13 1 CVE-2008-0001 RHSA-2008:0089  View
14 1 CVE-2008-0001 20080117 rPSA-2008-0021-1 kernel  View
15 1 CVE-2008-0001 27280  View
16 1 CVE-2008-0001 USN-574-1  View
17 1 CVE-2008-0001 USN-578-1  View
18 1 CVE-2008-0001 ADV-2008-0151  View
19 1 CVE-2008-0001 linux-directory-security-bypass(39672)  View
20 1 CVE-2008-0001 https://issues.rpath.com/browse/RPL-2146  View
21 1 CVE-2008-0001 FEDORA-2008-0748  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45738 JVNDB-2008-001048 Linux Kernel の VFS におけるパーミッションの制限回避の脆弱性 Linux Kernel の VFS には、acc_mode 変数の代わりに flag 変数を使用して、アクセスモードのテストを行うため、パーミッションの制限を回避される脆弱性が存在します。 CVE-2008-0001 30114 CVE-2008-0001 1 3.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001048.html 2008-01-15 2008-10-30 View