NVD

Id
3397  
Name
CVE-2008-3525  
Description
The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-03  
Modified Date
2013-07-18  
Seq
2008-3525  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21329 3397 CVE-2008-3525 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f2455eb176ac87081bbfc9a44b21c7cd2bc1967e  View
21330 3397 CVE-2008-3525 SUSE-SA:2008:047  View
21331 3397 CVE-2008-3525 SUSE-SA:2008:049  View
21332 3397 CVE-2008-3525 SUSE-SA:2008:051  View
21333 3397 CVE-2008-3525 SUSE-SA:2008:052  View
21334 3397 CVE-2008-3525 SUSE-SA:2008:053  View
21335 3397 CVE-2008-3525 SUSE-SR:2008:025  View
21336 3397 CVE-2008-3525 oval:org.mitre.oval:def:5671  View
21337 3397 CVE-2008-3525 oval:org.mitre.oval:def:9364  View
21338 3397 CVE-2008-3525 DSA-1653  View
21339 3397 CVE-2008-3525 DSA-1655  View
21340 3397 CVE-2008-3525 http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.7  View
21341 3397 CVE-2008-3525 MDVSA-2008:220  View
21342 3397 CVE-2008-3525 MDVSA-2008:223  View
21343 3397 CVE-2008-3525 [oss-security] 20080829 CVE-2008-3525 kernel: missing capability checks in sbni_ioctl()  View
21344 3397 CVE-2008-3525 RHSA-2008:0787  View
21345 3397 CVE-2008-3525 RHSA-2008:0973  View
21346 3397 CVE-2008-3525 1020969  View
21347 3397 CVE-2008-3525 USN-659-1  View
21348 3397 CVE-2008-3525 ADV-2008-2511  View
21349 3397 CVE-2008-3525 ADV-2008-2714  View
21350 3397 CVE-2008-3525 FEDORA-2008-8980  View
21351 3397 CVE-2008-3525 FEDORA-2008-8929  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46942 JVNDB-2008-002252 Linux Kernel の WAN サブシステムにおけるケーパビリティ制限を回避される脆弱性 Linux Kernel の WAN サブシステムにおける drivers/net/wan/sbni.c の sbni_ioctl 関数には、CAP_NET_ADMIN ケーパビリティに対するチェックを行わないため、ケーパビリティ制限を回避される脆弱性が存在します。 CVE-2008-3525 33638 CVE-2008-3525 3397 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002252.html 2008-09-03 2009-03-31 View