NVD

Id
49162  
Name
CVE-2009-1897  
Description
The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -fno-delete-null-pointer-checks gcc option is omitted, allows local users to gain privileges via vectors involving a NULL pointer dereference and an mmap of /dev/net/tun, a different vulnerability than CVE-2009-1894.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-20  
Modified Date
2012-03-19  
Seq
2009-1897  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248904 49162 CVE-2009-1897 20090716 Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable  View
248905 49162 CVE-2009-1897 20090716 Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable  View
248906 49162 CVE-2009-1897 [netdev] 20090409 Oops in tun: bisected to Limit amount of queued packets per device  View
248907 49162 CVE-2009-1897 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3c8a9c63d5fd738c261bd0ceece04d9c8357ca13  View
248908 49162 CVE-2009-1897 http://grsecurity.net/~spender/cheddar_bay.tgz  View
248909 49162 CVE-2009-1897 http://isc.sans.org/diary.html?storyid=6820  View
248910 49162 CVE-2009-1897 [linux-kernel] 20090706 Re: PROBLEM: tun/tap crashes if open() /dev/net/tun and then poll() it.  View
248911 49162 CVE-2009-1897 [oss-security] 20090717 Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable  View
248912 49162 CVE-2009-1897 ADV-2009-1925  View
248913 49162 CVE-2009-1897 linux-kernel-tunchrpoll-code-execution(51803)  View
248914 49162 CVE-2009-1897 https://bugzilla.redhat.com/show_bug.cgi?id=512284  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43688 JVNDB-2009-004695 Linux kernel の tun サブシステムにおける権限を取得される脆弱性 Linux kernel の tun サブシステムの drivers/net/tun.c の tun_chr_poll 関数は、-fno-delete-null-pointer-checks gcc オプションが省略されている際、NULL ポインタデリファレンスおよび /dev/net/tun の mmap を実行されることにより、権限を取得される脆弱性が存在します。 CVE-2009-1897 39328 CVE-2009-1897 49162 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004695.html 2009-07-05 2012-09-25 View