4.6
CVSSv2

CVE-2002-1826

Published: 31/12/2002 Updated: 05/09/2008
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory.

Vulnerable Product Search on Vulmon Subscribe to Product

grsecurity grsecurity kernel patch 1.9.4

Exploits

source: wwwsecurityfocuscom/bid/4762/info An attacker with root access may be able to write to kernel memory in spite of the security patch provided by grsecurity The patch operates by redirecting the write() system call, when it is being used to write to a memory device Unfortunately, there are other methods that can be used to write t ...