NVD

Id
48477  
Name
CVE-2009-1184  
Description
The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-05-05  
Modified Date
2012-03-19  
Seq
2009-1184  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244233 48477 CVE-2009-1184 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=910c9e41186762de3717baaf392ab5ff0c454496  View
244234 48477 CVE-2009-1184 [linux-kernel] 20090502 Linux 2.6.27.21  View
244235 48477 CVE-2009-1184 [linux-kernel] 20090502 Linux 2.6.28.10  View
244236 48477 CVE-2009-1184 http://patchwork.ozlabs.org/patch/25238/  View
244237 48477 CVE-2009-1184 DSA-1800  View
244238 48477 CVE-2009-1184 MDVSA-2009:118  View
244239 48477 CVE-2009-1184 MDVSA-2009:119  View
244240 48477 CVE-2009-1184 MDVSA-2009:135  View
244241 48477 CVE-2009-1184 [oss-security] 20090504 CVE-2009-1184 selinux: skipped node/port send checks in the compat_net=1 case  View
244242 48477 CVE-2009-1184 USN-793-1  View
244243 48477 CVE-2009-1184 https://launchpad.net/bugs/cve/2009-1184  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43540 JVNDB-2009-004547 Linux kernel の SELinux サブシステムにおけるネットワークトラフィック上の制限を回避される脆弱性 Linux kernel の SELinux サブシステムの security/selinux/hooks.c の selinux_ip_postroute_iptables_compat 関数は、compat_net が有効になっている際、(1) node および (2) port に対して avc_has_perm への呼び出しを省略するため、ネットワークトラフィック上の制限を回避される脆弱性が存在します。 CVE-2009-1184 38615 CVE-2009-1184 48477 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004547.html 2009-05-05 2012-09-25 View