NVD

Id
48624  
Name
CVE-2009-1337  
Description
The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-22  
Modified Date
2012-03-19  
Seq
2009-1337  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245395 48624 CVE-2009-1337 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=432870dab85a2f69dc417022646cb9a70acf7f94  View
245396 48624 CVE-2009-1337 SUSE-SA:2009:028  View
245397 48624 CVE-2009-1337 SUSE-SA:2009:030  View
245398 48624 CVE-2009-1337 SUSE-SA:2009:031  View
245399 48624 CVE-2009-1337 SUSE-SA:2009:032  View
245400 48624 CVE-2009-1337 [linux-kernel] 20090225 Re: [PATCH 2/2] exit_notify: kill the wrong capable(CAP_KILL) check  View
245401 48624 CVE-2009-1337 oval:org.mitre.oval:def:10919  View
245402 48624 CVE-2009-1337 oval:org.mitre.oval:def:11206  View
245403 48624 CVE-2009-1337 oval:org.mitre.oval:def:8295  View
245404 48624 CVE-2009-1337 http://patchwork.kernel.org/patch/16544/  View
245405 48624 CVE-2009-1337 RHSA-2009:0473  View
245406 48624 CVE-2009-1337 http://wiki.rpath.com/Advisories:rPSA-2009-0084  View
245407 48624 CVE-2009-1337 DSA-1787  View
245408 48624 CVE-2009-1337 DSA-1794  View
245409 48624 CVE-2009-1337 DSA-1800  View
245410 48624 CVE-2009-1337 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1  View
245411 48624 CVE-2009-1337 MDVSA-2009:119  View
245412 48624 CVE-2009-1337 MDVSA-2009:135  View
245413 48624 CVE-2009-1337 [oss-security] 20090407 CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check  View
245414 48624 CVE-2009-1337 [oss-security] 20090417 Re: CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check  View
245415 48624 CVE-2009-1337 RHSA-2009:0451  View
245416 48624 CVE-2009-1337 RHSA-2009:1024  View
245417 48624 CVE-2009-1337 RHSA-2009:1077  View
245418 48624 CVE-2009-1337 20090516 rPSA-2009-0084-1 kernel  View
245419 48624 CVE-2009-1337 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
245420 48624 CVE-2009-1337 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel  View
245421 48624 CVE-2009-1337 34405  View
245422 48624 CVE-2009-1337 1022141  View
245423 48624 CVE-2009-1337 USN-793-1  View
245424 48624 CVE-2009-1337 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
245425 48624 CVE-2009-1337 ADV-2009-3316  View
245426 48624 CVE-2009-1337 https://bugzilla.redhat.com/show_bug.cgi?id=493771  View
245427 48624 CVE-2009-1337 RHSA-2009:1550  View
245428 48624 CVE-2009-1337 FEDORA-2009-5356  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40288 JVNDB-2009-001294 Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性 Linux Kernel の kernel/exit.c にある exit_notify 関数には、CAP_KILL ケーパビリティを持つ exit シグナルを制限しないため、setuid アプリケーションをシステムコールで呼び出す際に、exit_signal フィールドを改ざんしたプログラムを起動することにより、任意のシグナルをプロセスに送信可能な脆弱性が存在します。 CVE-2009-1337 38768 CVE-2009-1337 48624 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001294.html 2009-04-22 2010-01-21 View