NVD

Id
15602  
Name
CVE-2010-4347  
Description
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-22  
Modified Date
2012-03-19  
Seq
2010-4347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88344 15602 CVE-2010-4347 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ed3aada1bf34c5a9e98af167f125f8a740fc726a  View
88345 15602 CVE-2010-4347 SUSE-SA:2011:001  View
88346 15602 CVE-2010-4347 SUSE-SA:2011:007  View
88347 15602 CVE-2010-4347 [oss-security] 20101215 CVE Request: local privilege escalation via /sys/kernel/debug/acpi/custom_method  View
88348 15602 CVE-2010-4347 [oss-security] 20101215 Re: CVE Request: local privilege escalation via /sys/kernel/debug/acpi/custom_method  View
88349 15602 CVE-2010-4347 15774  View
88350 15602 CVE-2010-4347 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2  View
88351 15602 CVE-2010-4347 45408  View
88352 15602 CVE-2010-4347 ADV-2011-0012  View
88353 15602 CVE-2010-4347 ADV-2011-0298  View
88354 15602 CVE-2010-4347 kernel-debugfs-privilege-esc(64155)  View
88355 15602 CVE-2010-4347 https://bugzilla.redhat.com/show_bug.cgi?id=663542  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37012 JVNDB-2010-002792 Linux kernel の ACPI サブシステムにおける権限を取得される脆弱性 Linux kernel の ACPI サブシステムは、drivers/acpi/debugfs.c 内にある acpi_debugfs_init 関数の処理に関して不備があるため、 debugfs custom_method ファイルに対する 0222 パーミッションを使用により、権限を取得される脆弱性が存在します。 CVE-2010-4347 46927 CVE-2010-4347 15602 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002792.html 2010-12-09 2011-04-08 View