NVD

Id
50908  
Name
CVE-2009-3725  
Description
The connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN capability for certain interaction with the (1) uvesafb, (2) pohmelfs, (3) dst, or (4) dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these subsystems.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-06  
Modified Date
2012-03-19  
Seq
2009-3725  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257776 50908 CVE-2009-3725 [linux-kernel] 20091002 Re: [PATCH 0/8] SECURITY ISSUE with connector  View
257777 50908 CVE-2009-3725 [oss-security] 20091102 CVE request: kernel: connector security bypass  View
257778 50908 CVE-2009-3725 [oss-security] 20091102 Re: CVE request: kernel: connector security bypass  View
257779 50908 CVE-2009-3725 http://patchwork.kernel.org/patch/51382/  View
257780 50908 CVE-2009-3725 http://patchwork.kernel.org/patch/51383/  View
257781 50908 CVE-2009-3725 http://patchwork.kernel.org/patch/51384/  View
257782 50908 CVE-2009-3725 http://patchwork.kernel.org/patch/51387/  View
257783 50908 CVE-2009-3725 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.5  View
257784 50908 CVE-2009-3725 36834  View
257785 50908 CVE-2009-3725 USN-864-1  View
257786 50908 CVE-2009-3725 http://xorl.wordpress.com/2009/10/31/linux-kernel-multiple-capabilities-missing-checks/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44060 JVNDB-2009-005067 Linux kernel の connector layer における権限を取得される脆弱性 Linux kernel の connector layer は、(1) uvesafb、(2) pohmelfs、(3) dst、または (4) dm サブシステムとの特定の相互作用に対する CAP_SYS_ADMIN 機能を要求しないため、アクセス制限を回避される、および権限を取得される脆弱性が存在します。 CVE-2009-3725 41156 CVE-2009-3725 50908 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005067.html 2009-10-02 2012-09-25 View