NVD

Id
51055  
Name
CVE-2009-3889  
Description
The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-11-16  
Modified Date
2012-03-19  
Seq
2009-3889  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
258709 51055 CVE-2009-3889 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46  View
258710 51055 CVE-2009-3889 SUSE-SA:2009:061  View
258711 51055 CVE-2009-3889 SUSE-SA:2009:064  View
258712 51055 CVE-2009-3889 SUSE-SA:2010:013  View
258713 51055 CVE-2009-3889 oval:org.mitre.oval:def:11018  View
258714 51055 CVE-2009-3889 oval:org.mitre.oval:def:7163  View
258715 51055 CVE-2009-3889 http://support.avaya.com/css/P8/documents/100073666  View
258716 51055 CVE-2009-3889 DSA-2005  View
258717 51055 CVE-2009-3889 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27  View
258718 51055 CVE-2009-3889 [oss-security] 20091113 CVE request: kernel: bad permissions on megaraid_sas sysfs files  View
258719 51055 CVE-2009-3889 [oss-security] 20091113 Re: CVE request: kernel: bad permissions on megaraid_sas sysfs files  View
258720 51055 CVE-2009-3889 37019  View
258721 51055 CVE-2009-3889 USN-864-1  View
258722 51055 CVE-2009-3889 https://bugzilla.redhat.com/show_bug.cgi?id=526068  View
258723 51055 CVE-2009-3889 RHSA-2010:0046  View
258724 51055 CVE-2009-3889 RHSA-2010:0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41494 JVNDB-2009-002501 Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性 Linux kernel の megaraid_sas ドライバ用の dbg_lvl ファイルには、world-writable のパーミッションがあるため、ドライバの動作およびログレベルを変更される脆弱性が存在します。 CVE-2009-3889 41320 CVE-2009-3889 51055 6.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002501.html 2009-11-16 2010-04-02 View