NVD

Id
13160  
Name
CVE-2010-1641  
Description
The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-01  
Modified Date
2012-03-19  
Seq
2010-1641  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72704 13160 CVE-2010-1641 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7df0e0397b9a18358573274db9fdab991941062f  View
72705 13160 CVE-2010-1641 SUSE-SA:2010:031  View
72706 13160 CVE-2010-1641 SUSE-SA:2010:033  View
72707 13160 CVE-2010-1641 oval:org.mitre.oval:def:9916  View
72708 13160 CVE-2010-1641 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/incr/patch-2.6.34-git9-git10.bz2  View
72709 13160 CVE-2010-1641 [oss-security] 20100525 CVE request - kernel: GFS2: The setflags ioctl() doesn"t check file ownership  View
72710 13160 CVE-2010-1641 [oss-security] 20100525 Re: CVE request - kernel: GFS2: The setflags ioctl() doesn"t check file ownership  View
72711 13160 CVE-2010-1641 [oss-security] 20100526 Re: CVE request - kernel: GFS2: The setflags ioctl() doesn"t check file ownership  View
72712 13160 CVE-2010-1641 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
72713 13160 CVE-2010-1641 40356  View
72714 13160 CVE-2010-1641 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
72715 13160 CVE-2010-1641 ADV-2010-1857  View
72716 13160 CVE-2010-1641 kernel-gfs2-security-bypass(58926)  View
72717 13160 CVE-2010-1641 https://bugzilla.redhat.com/show_bug.cgi?id=595579  View
72718 13160 CVE-2010-1641 [cluster-devel] 20100525 [PATCH 3/3] GFS2: Fix permissions checking for setflags ioctl()  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35947 JVNDB-2010-001727 Linux kernel の do_gfs2_set_flags 関数におけるアクセス制限を回避される脆弱性 Linux kernel の fs/gfs2/file.c の do_gfs2_set_flags 関数には、ファイルの所有権を検証しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2010-1641 44221 CVE-2010-1641 13160 4.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001727.html 2010-06-01 2011-03-03 View