Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.6
CVSSv2

CVE-2008-4210

Published: 29/09/2008 Updated: 07/11/2023
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Linux Kernel

Vulnerability Summary

fs/open.c in the Linux kernel prior to 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.18

linux linux kernel 2.4.36.6

linux linux kernel 2.6.21.6

linux linux kernel 2.4.36.2

linux linux kernel 2.6.20.16

linux linux kernel 2.6.19.4

linux linux kernel 2.6.20.21

linux linux kernel 2.4.36.1

linux linux kernel 2.6.20.17

linux linux kernel 2.6.21.5

linux linux kernel 2.4.36.4

linux linux kernel 2.6.20.20

linux linux kernel 2.4.36.3

linux linux kernel 2.6.20.18

linux linux kernel 2.6.19.7

linux linux kernel 2.6.20.19

linux linux kernel 2.4.36

linux linux kernel 2.6.19.6

linux linux kernel 2.6.19.5

linux linux kernel 2.4.36.5

linux linux kernel 2.2.27

linux linux kernel

linux linux kernel 2.6

Vendor Advisories

Ubuntu Security Notice: linux, linux-source-2.6.15⁄22 vulnerabilities
It was discovered that the Xen hypervisor block driver did not correctly validate requests A user with root privileges in a guest OS could make a malicious IO request with a large number of blocks that would crash the host OS, leading to a denial of service This only affected Ubuntu 710 (CVE-2007-5498) ...
Red Hat: Important: kernel security and bug fix update
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues and fixvarious bugs are now available for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedH ...
Red Hat: Important: kernel security update
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix a number of security issues are nowavailable for Red Hat Enterprise Linux 21 running on 64-bit architecturesThis update has been rated as having important security impact by the Red ...
Red Hat: Important: kernel security and bug fix update
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues and fixvarious bugs are now available for Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedH ...
Red Hat: Important: kernel security and bug fix update
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues and fixvarious bugs are now available for Red Hat Enterprise Linux 3This update has been rated as having important security impact by the RedH ...
Red Hat: Important: kernel security update
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix a number of security issues are nowavailable for Red Hat Enterprise Linux 21 running on 32-bit architecturesThis update has been rated as having important security impact by the Red ...

Exploits

Exploit DB: Linux Kernel < 2.6.22 - 'ftruncate()'/'open()' Local Privilege Escalation
/* gw-ftrexc: Linux kernel &lt; 2622 open/ftruncate local exploit by &lt;gat3way at gat3way dot eu&gt; bug information: osvdborg/49081 !!!This is for educational purposes only!!! To use it, you've got to find a sgid directory you've got permissions to write into (obviously world-writable), eg: find / -perm -2000 -type d 2&gt;/dev/n ...

References

CWE-264https://bugzilla.redhat.com/show_bug.cgi?id=463661http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22http://www.securityfocus.com/bid/31368http://www.openwall.com/lists/oss-security/2008/09/24/8http://bugzilla.kernel.org/show_bug.cgi?id=8420http://www.openwall.com/lists/oss-security/2008/09/24/5http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22http://secunia.com/advisories/32485http://www.redhat.com/support/errata/RHSA-2008-0957.htmlhttp://www.ubuntu.com/usn/usn-679-1http://secunia.com/advisories/32799http://secunia.com/advisories/32918http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlhttp://secunia.com/advisories/32759http://rhn.redhat.com/errata/RHSA-2008-0972.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0973.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-12/msg00000.htmlhttp://secunia.com/advisories/33201http://secunia.com/advisories/33280http://www.redhat.com/support/errata/RHSA-2008-0787.htmlhttp://www.debian.org/security/2008/dsa-1653http://secunia.com/advisories/32237http://www.mandriva.com/security/advisories?name=MDVSA-2008:220http://secunia.com/advisories/32356http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00007.htmlhttp://secunia.com/advisories/32344https://exchange.xforce.ibmcloud.com/vulnerabilities/45539https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9511https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6386http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=7b82dc0e64e93f430182f36b46b79fcee87d3532https://usn.ubuntu.com/679-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/6851/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook