NVD

Id
1253  
Name
CVE-2008-1294  
Description
Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-05-02  
Modified Date
2010-08-21  
Seq
2008-1294  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7945 1253 CVE-2008-1294 http://bugs.gentoo.org/show_bug.cgi?id=215000  View
7946 1253 CVE-2008-1294 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9926e4c74300c4b31dee007298c6475d33369df0  View
7947 1253 CVE-2008-1294 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22  View
7948 1253 CVE-2008-1294 oval:org.mitre.oval:def:10974  View
7949 1253 CVE-2008-1294 DSA-1565  View
7950 1253 CVE-2008-1294 RHSA-2008:0612  View
7951 1253 CVE-2008-1294 29004  View
7952 1253 CVE-2008-1294 USN-618-1  View
7953 1253 CVE-2008-1294 linux-kernel-rlimitcpu-security-bypass(42145)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46302 JVNDB-2008-001612 Linux Kernel におけるリソースの制限を回避される問題 Linux Kernel には、RLIMIT_CPU を 0 に設定した場合、リソースの制限を回避される問題が存在します。 CVE-2008-1294 31407 CVE-2008-1294 1253 2.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001612.html 2008-05-02 2008-10-28 View