NVD

Id
50125  
Name
CVE-2009-2904  
Description
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-10-01  
Modified Date
2014-08-08  
Seq
2009-2904  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253714 50125 CVE-2009-2904 FEDORA-2010-5429  View
253715 50125 CVE-2009-2904 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
253716 50125 CVE-2009-2904 oval:org.mitre.oval:def:9862  View
253717 50125 CVE-2009-2904 36552  View
253718 50125 CVE-2009-2904 ADV-2010-0528  View
253719 50125 CVE-2009-2904 https://bugzilla.redhat.com/show_bug.cgi?id=522141  View
253720 50125 CVE-2009-2904 RHSA-2009:1470  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41189 JVNDB-2009-002196 OpenSSH の ChrootDirectory 機能における権限を取得される脆弱性 Red Hat Enterprise Linux (RHEL) の OpenSSH にある Red Hat 修正 ChrootDirectory 機能には、setuid プログラムのハードリンク処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2009-2904 40335 CVE-2009-2904 50125 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002196.html 2009-09-30 2009-11-10 View