NVD

Id
4375  
Name
CVE-2008-4554  
Description
The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-15  
Modified Date
2012-10-29  
Seq
2008-4554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27647 4375 CVE-2008-4554 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=efc968d450e013049a662d22727cf132618dcb2f  View
27648 4375 CVE-2008-4554 SUSE-SA:2009:030  View
27649 4375 CVE-2008-4554 oval:org.mitre.oval:def:11142  View
27650 4375 CVE-2008-4554 DSA-1681  View
27651 4375 CVE-2008-4554 DSA-1687  View
27652 4375 CVE-2008-4554 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27  View
27653 4375 CVE-2008-4554 MDVSA-2008:224  View
27654 4375 CVE-2008-4554 [oss-security] 20081013 CVE request: kernel: don"t allow splice() to files opened with O_APPEND  View
27655 4375 CVE-2008-4554 [oss-security] 20081014 Re: CVE request: kernel: don"t allow splice() to files opened with O_APPEND  View
27656 4375 CVE-2008-4554 RHSA-2008:1017  View
27657 4375 CVE-2008-4554 RHSA-2009:0009  View
27658 4375 CVE-2008-4554 31903  View
27659 4375 CVE-2008-4554 USN-679-1  View
27660 4375 CVE-2008-4554 linux-kernel-dosplicefrom-security-bypass(45954)  View
27661 4375 CVE-2008-4554 https://bugzilla.redhat.com/show_bug.cgi?id=466707  View
27662 4375 CVE-2008-4554 FEDORA-2008-8980  View
27663 4375 CVE-2008-4554 FEDORA-2008-8929  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46933 JVNDB-2008-002243 Linux kernel の do_splice_from 関数におけるファイルを変更される脆弱性 Linux kernel の fs/splice.c 内にある do_splice_from 関数には、O_APPEND フラグがセットされたファイルディスクリプタを処理してしまうため、追加モードを回避し、ファイルを変更される脆弱性が存在します。 CVE-2008-4554 34667 CVE-2008-4554 4375 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002243.html 2008-10-15 2009-02-04 View