NVD

Id
49932  
Name
CVE-2009-2691  
Description
The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps and (2) smaps files under proc/ via vectors related to ELF loading, a setuid process, and a race condition.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-14  
Modified Date
2012-03-19  
Seq
2009-2691  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
252585 49932 CVE-2009-2691 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=00f89d218523b9bf6b522349c039d5ac80aa536d  View
252586 49932 CVE-2009-2691 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13f0feafa6b8aead57a2a328e2fca6a5828bf286  View
252587 49932 CVE-2009-2691 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=704b836cbf19e885f8366bccb2e4b0474346c02d  View
252588 49932 CVE-2009-2691 [linux-kernel] 20090623 [PATCH 0/1] mm_for_maps: simplify, use ptrace_may_access()  View
252589 49932 CVE-2009-2691 [linux-kernel] 20090623 [PATCH 1/1] mm_for_maps: simplify, use ptrace_may_access()  View
252590 49932 CVE-2009-2691 [linux-kernel] 20090710 [PATCH 1/2] mm_for_maps: shift down_read(mmap_sem) to the caller  View
252591 49932 CVE-2009-2691 [linux-kernel] 20090710 [PATCH 2/2] mm_for_maps: take ->cred_guard_mutex to fix the race  View
252592 49932 CVE-2009-2691 DSA-2005  View
252593 49932 CVE-2009-2691 [oss-security] 20090811 CVE-2009-2691 kernel: /proc/$pid/maps visible during initial setuid ELF loading  View
252594 49932 CVE-2009-2691 36019  View
252595 49932 CVE-2009-2691 ADV-2009-2246  View
252596 49932 CVE-2009-2691 linux-kernel-mmformaps-info-disclosure(52401)  View
252597 49932 CVE-2009-2691 https://bugzilla.redhat.com/show_bug.cgi?id=516171  View
252598 49932 CVE-2009-2691 RHSA-2009:1540  View
252599 49932 CVE-2009-2691 FEDORA-2009-9044  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43856 JVNDB-2009-004863 Linux kernel の fs/proc/base.c における proc/ 配下の maps などのファイルを読まれる脆弱性 Linux kernel の fs/proc/base.c の mm_for_maps 関数は、ELF 読み込み、setuid プロセス、および競合状態に関連する不備があるため、proc/ 配下の (1) maps および (2) smaps ファイルを読まれる脆弱性が存在します。 CVE-2009-2691 40122 CVE-2009-2691 49932 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004863.html 2009-07-10 2012-09-25 View