NVD

Id
48150  
Name
CVE-2009-0835  
Description
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-06  
Modified Date
2012-03-19  
Seq
2009-0835  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241826 48150 CVE-2009-0835 SUSE-SA:2009:021  View
241827 48150 CVE-2009-0835 SUSE-SA:2009:028  View
241828 48150 CVE-2009-0835 SUSE-SA:2009:030  View
241829 48150 CVE-2009-0835 SUSE-SA:2009:031  View
241830 48150 CVE-2009-0835 [linux-kernel] 20090227 Re: [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole  View
241831 48150 CVE-2009-0835 [linux-kernel] 20090228 [PATCH 0/2] x86-64: 32/64 syscall arch holes  View
241832 48150 CVE-2009-0835 [linux-kernel] 20090228 [PATCH 2/2] x86-64: seccomp: fix 32/64 syscall hole  View
241833 48150 CVE-2009-0835 [oss-security] 20090302 CVE request: kernel: x86-64: seccomp: 32/64 syscall hole  View
241834 48150 CVE-2009-0835 http://scary.beasts.org/security/CESA-2009-001.html  View
241835 48150 CVE-2009-0835 http://scary.beasts.org/security/CESA-2009-004.html  View
241836 48150 CVE-2009-0835 http://scarybeastsecurity.blogspot.com/2009/02/linux-kernel-minor-seccomp.html  View
241837 48150 CVE-2009-0835 DSA-1800  View
241838 48150 CVE-2009-0835 MDVSA-2009:118  View
241839 48150 CVE-2009-0835 RHSA-2009:0451  View
241840 48150 CVE-2009-0835 33948  View
241841 48150 CVE-2009-0835 USN-751-1  View
241842 48150 CVE-2009-0835 https://bugzilla.redhat.com/show_bug.cgi?id=487255  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43502 JVNDB-2009-004509 Linux kernel の seccomp サブシステムにおけるアクセス制限を回避される脆弱性 x86_64 上で稼動する Linux kernel の seccomp サブシステムの kernel/seccomp.c の __secure_computing 関数は、CONFIG_SECCOMP が有効になっている際、(1) 64 ビットの syscall 生成する 32 ビットプロセス、または (2) 32 ビットの syscall 生成する 64 ビットプロセスを適切に処理しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2009-0835 38266 CVE-2009-0835 48150 3.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004509.html 2009-03-06 2012-09-25 View