NVD

Id
49160  
Name
CVE-2009-1895  
Description
The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-16  
Modified Date
2013-07-06  
Seq
2009-1895  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248874 49160 CVE-2009-1895 http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html  View
248875 49160 CVE-2009-1895 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6  View
248876 49160 CVE-2009-1895 oval:org.mitre.oval:def:11768  View
248877 49160 CVE-2009-1895 oval:org.mitre.oval:def:7826  View
248878 49160 CVE-2009-1895 oval:org.mitre.oval:def:9453  View
248879 49160 CVE-2009-1895 http://patchwork.kernel.org/patch/32598/  View
248880 49160 CVE-2009-1895 http://wiki.rpath.com/Advisories:rPSA-2009-0111  View
248881 49160 CVE-2009-1895 DSA-1844  View
248882 49160 CVE-2009-1895 DSA-1845  View
248883 49160 CVE-2009-1895 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3  View
248884 49160 CVE-2009-1895 MDVSA-2011:051  View
248885 49160 CVE-2009-1895 RHSA-2009:1193  View
248886 49160 CVE-2009-1895 RHSA-2009:1438  View
248887 49160 CVE-2009-1895 20090724 rPSA-2009-0111-1 kernel  View
248888 49160 CVE-2009-1895 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
248889 49160 CVE-2009-1895 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel  View
248890 49160 CVE-2009-1895 35647  View
248891 49160 CVE-2009-1895 USN-807-1  View
248892 49160 CVE-2009-1895 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
248893 49160 CVE-2009-1895 ADV-2009-1866  View
248894 49160 CVE-2009-1895 ADV-2009-3316  View
248895 49160 CVE-2009-1895 https://bugs.launchpad.net/bugs/cve/2009-1895  View
248896 49160 CVE-2009-1895 RHSA-2009:1540  View
248897 49160 CVE-2009-1895 RHSA-2009:1550  View
248898 49160 CVE-2009-1895 FEDORA-2009-8264  View
248899 49160 CVE-2009-1895 FEDORA-2009-8144  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40968 JVNDB-2009-001974 Linux kernel の personality サブシステムにおける NULL ポインタ参照の脆弱性 Linux kernel の personality サブシステムが持つ PER_CLEAR_ON_SETID には、setuid または setgid プログラムを実行する際に ADDR_COMPAT_LAYOUT および MMAP_PAGE_ZERO フラグを消去しないため、NULL ポインタ参照の攻撃を誘導される、mmap_min_addr 防御機構を回避される、または Address Space Layout Randomization (ASLR) を回避される脆弱性が存在します。 CVE-2009-1895 39326 CVE-2009-1895 49160 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001974.html 2009-07-16 2010-02-16 View