NVD

Id
50490  
Name
CVE-2009-3286  
Description
NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-22  
Modified Date
2012-03-19  
Seq
2009-3286  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255375 50490 CVE-2009-3286 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=81ac95c5  View
255376 50490 CVE-2009-3286 SUSE-SA:2010:012  View
255377 50490 CVE-2009-3286 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
255378 50490 CVE-2009-3286 oval:org.mitre.oval:def:7527  View
255379 50490 CVE-2009-3286 oval:org.mitre.oval:def:9757  View
255380 50490 CVE-2009-3286 [oss-security] 20090921 CVE request: kernel: issue with O_EXCL creates on NFSv4  View
255381 50490 CVE-2009-3286 USN-852-1  View
255382 50490 CVE-2009-3286 ADV-2010-0528  View
255383 50490 CVE-2009-3286 https://bugzilla.redhat.com/show_bug.cgi?id=524520  View
255384 50490 CVE-2009-3286 RHSA-2009:1548  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41355 JVNDB-2009-002362 Linux kernel の NFSv4 における権限昇格の脆弱性 Linux kernel の NFSv4 には、O_EXCL フラグでファイル作成が失敗する場合 inode が適切に削除されないため、権限昇格の脆弱性が存在します。 CVE-2009-3286 40717 CVE-2009-3286 50490 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002362.html 2009-09-22 2010-01-26 View