Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2009-4131

Published: 13/12/2009 Updated: 13/02/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Linux Kernel

Vulnerability Summary

The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel prior to 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.27.29

linux linux kernel 2.6.27.12

linux linux kernel 2.6.20.6

linux linux kernel 2.6.20.9

linux linux kernel 2.6.11

linux linux kernel 2.6.23.4

linux linux kernel 2.6.22.15

linux linux kernel 2.6.16.16

linux linux kernel 2.6.18.7

linux linux kernel 2.6.17.12

linux linux kernel 2.6.16.39

linux linux kernel 2.6.27.3

linux linux kernel 2.6.31

linux linux kernel 2.6.29.3

linux linux kernel 2.6.21

linux linux kernel 2.6.16.9

linux linux kernel 2.6.17.9

linux linux kernel 2.6.32

linux linux kernel 2.6.11.2

linux linux kernel 2.6.27.1

linux linux kernel 2.6.5

linux linux kernel 2.6.15.3

linux linux kernel 2.6.27.30

linux linux kernel 2.6.11.10

linux linux kernel 2.6.24.7

linux linux kernel 2.6.1

linux linux kernel 2.6.16.43

linux linux kernel 2.6.16.6

linux linux kernel 2.6.31.3

linux linux kernel 2.6.16.8

linux linux kernel 2.6.20.13

linux linux kernel 2.6.22.4

linux linux kernel 2.6.14.7

linux linux kernel 2.6.27.18

linux linux kernel 2.6.13

linux linux kernel 2.6.17.2

linux linux kernel 2.6.13.3

linux linux kernel 2.6.23.13

linux linux kernel 2.6.11.8

linux linux kernel 2.6.24.2

linux linux kernel 2.6.26.5

linux linux kernel 2.6.16.34

linux linux kernel 2.6.25.20

linux linux kernel 2.6.27.21

linux linux kernel 2.6.23.7

linux linux kernel 2.6.17.8

linux linux kernel 2.6.14.4

linux linux kernel 2.6.14

linux linux kernel 2.6.25.5

linux linux kernel 2.6.17.4

linux linux kernel 2.6.16.18

linux linux kernel 2.6.27.27

linux linux kernel 2.6.17.14

linux linux kernel 2.6.10

linux linux kernel 2.6.23.8

linux linux kernel 2.6.16.45

linux linux kernel 2.6.22.12

linux linux kernel 2.6.25.18

linux linux kernel 2.6.14.3

linux linux kernel 2.6.29

linux linux kernel 2.6.18.3

linux linux kernel 2.6.16.37

linux linux kernel 2.6.11.6

linux linux kernel 2.6.16.48

linux linux kernel 2.6.11.11

linux linux kernel 2.6.16.13

linux linux kernel 2.6.27.10

linux linux kernel 2.6.3

linux linux kernel 2.6.31.4

linux linux kernel 2.6.21.6

linux linux kernel 2.6.26.6

linux linux kernel 2.6.22.1

linux linux kernel 2.6.27.17

linux linux kernel 2.6.16.4

linux linux kernel 2.6.23.16

linux linux kernel 2.6.31.6

linux linux kernel 2.6.17.3

linux linux kernel 2.6.24.1

linux linux kernel 2.6.20.5

linux linux kernel 2.6.22

linux linux kernel 2.6.28.4

linux linux kernel 2.6.4

linux linux kernel 2.6.27.16

linux linux kernel 2.6.26

linux linux kernel 2.6.16.15

linux linux kernel 2.6.27.20

linux linux kernel 2.6.15.6

linux linux kernel 2.6.26.3

linux linux kernel 2.6.20.16

linux linux kernel 2.6.15.1

linux linux kernel 2.6.11.5

linux linux kernel 2.6.28.2

linux linux kernel 2.6.25.9

linux linux kernel 2.6.19.3

linux linux kernel 2.6.27.4

linux linux kernel 2.6.27

linux linux kernel 2.6.19.4

linux linux kernel 2.6.25.13

linux linux kernel 2.6.28.5

linux linux kernel 2.6.19.1

linux linux kernel 2.6.18.4

linux linux kernel 2.6.16.1

linux linux kernel 2.6.18.1

linux linux kernel 2.6.20.21

linux linux kernel 2.6.27.13

linux linux kernel 2.6.23.1

linux linux kernel 2.6.2

linux linux kernel 2.6.14.5

linux linux kernel 2.6.13.2

linux linux kernel 2.6.17.5

linux linux kernel 2.6.18.5

linux linux kernel 2.6.21.1

linux linux kernel 2.6.16.32

linux linux kernel 2.6.13.5

linux linux kernel 2.6.16.57

linux linux kernel 2.6.16.49

linux linux kernel 2.6.25.3

linux linux kernel 2.6.17

linux linux kernel 2.6.24

linux linux kernel 2.6.31.1

linux linux kernel 2.6.19.2

linux linux kernel 2.6.26.2

linux linux kernel 2.6.21.4

linux linux kernel 2.6.16.11

linux linux kernel 2.6.20.17

linux linux kernel 2.6.16.14

linux linux kernel 2.6.20.12

linux linux kernel 2.6.16.25

linux linux kernel 2.6.27.15

linux linux kernel 2.6.16.21

linux linux kernel 2.6.16.33

linux linux kernel 2.6.30.7

linux linux kernel 2.6.8

linux linux kernel 2.6.16.28

linux linux kernel 2.6.17.10

linux linux kernel 2.6.21.5

linux linux kernel 2.6.25.15

linux linux kernel 2.6.14.1

linux linux kernel 2.6.23.15

linux linux kernel 2.6.16.23

linux linux kernel

linux linux kernel 2.6.29.4

linux linux kernel 2.6.12.5

linux linux kernel 2.6.15.7

linux linux kernel 2.6.20

linux linux kernel 2.6.23.10

linux linux kernel 2.6.22.7

linux linux kernel 2.6.27.26

linux linux kernel 2.6.16.3

linux linux kernel 2.6.27.8

linux linux kernel 2.6.26.1

linux linux kernel 2.6.25.19

linux linux kernel 2.6.20.20

linux linux kernel 2.6.16.36

linux linux kernel 2.6.30.8

linux linux kernel 2.6.14.6

linux linux kernel 2.6.12.1

linux linux kernel 2.6.27.9

linux linux kernel 2.6.11.9

linux linux kernel 2.6.16.46

linux linux kernel 2.6.17.1

linux linux kernel 2.6.20.8

linux linux kernel 2.6.27.25

linux linux kernel 2.6.30.9

linux linux kernel 2.6.20.15

linux linux kernel 2.6.22.18

linux linux kernel 2.6.0

linux linux kernel 2.6.25.8

linux linux kernel 2.6.16.54

linux linux kernel 2.6.13.4

linux linux kernel 2.6.20.18

linux linux kernel 2.6.23.9

linux linux kernel 2.6.22.6

linux linux kernel 2.6.23.3

linux linux kernel 2.6.18.8

linux linux kernel 2.6.22.3

linux linux kernel 2.6.12.2

linux linux kernel 2.6.16.31

linux linux kernel 2.6.16.26

linux linux kernel 2.6.16.62

linux linux kernel 2.6.18.2

linux linux kernel 2.6.28.8

linux linux kernel 2.6.16.29

linux linux kernel 2.6.29.1

linux linux kernel 2.6.24.4

linux linux kernel 2.6.27.19

linux linux kernel 2.6.25.16

linux linux kernel 2.6.22.9

linux linux kernel 2.6.25.17

linux linux kernel 2.6.20.11

linux linux kernel 2.6.19

linux linux kernel 2.6.20.3

linux linux kernel 2.6.16

linux linux kernel 2.6.30.4

linux linux kernel 2.6.28.3

linux linux kernel 2.6.22.13

linux linux kernel 2.6.19.7

linux linux kernel 2.6.21.3

linux linux kernel 2.6.27.28

linux linux kernel 2.6.24.5

linux linux kernel 2.6.16.51

linux linux kernel 2.6.15.2

linux linux kernel 2.6.20.19

linux linux kernel 2.6.16.22

linux linux kernel 2.6.22.17

linux linux kernel 2.6.16.58

linux linux kernel 2.6.16.40

linux linux kernel 2.6.16.47

linux linux kernel 2.6.16.42

linux linux kernel 2.6.27.22

linux linux kernel 2.6.23.14

linux linux kernel 2.6.17.11

linux linux kernel 2.6.16.10

linux linux kernel 2.6.12.4

linux linux kernel 2.6.16.41

linux linux kernel 2.6.16.52

linux linux kernel 2.6.11.3

linux linux kernel 2.6.20.10

linux linux kernel 2.6.16.24

linux linux kernel 2.6.25.10

linux linux kernel 2.6.22.11

linux linux kernel 2.6.16.55

linux linux kernel 2.6.23

linux linux kernel 2.6.12.3

linux linux kernel 2.6.22.10

linux linux kernel 2.6.29.6

linux linux kernel 2.6.23.17

linux linux kernel 2.6.27.5

linux linux kernel 2.6.23.2

linux linux kernel 2.6.25.1

linux linux kernel 2.6.25.4

linux linux kernel 2.6.28.9

linux linux kernel 2.6.30.2

linux linux kernel 2.6.7

linux linux kernel 2.6.21.7

linux linux kernel 2.6.30.6

linux linux kernel 2.6.16.30

linux linux kernel 2.6.21.2

linux linux kernel 2.6.15.4

linux linux kernel 2.6.27.7

linux linux kernel 2.6.16.59

linux linux kernel 2.6.30.1

linux linux kernel 2.6.16.38

linux linux kernel 2.6.16.17

linux linux kernel 2.6.26.8

linux linux kernel 2.6.20.2

linux linux kernel 2.6.28.6

linux linux kernel 2.6.16.12

linux linux kernel 2.6.31.5

linux linux kernel 2.6.16.27

linux linux kernel 2.6.16.53

linux linux kernel 2.6.28.7

linux linux kernel 2.6.12.6

linux linux kernel 2.6.17.7

linux linux kernel 2.6.20.1

linux linux kernel 2.6.11.7

linux linux kernel 2.6.16.2

linux linux kernel 2.6.24.6

linux linux kernel 2.6.18.6

linux linux kernel 2.6.15

linux linux kernel 2.6.16.44

linux linux kernel 2.6.23.12

linux linux kernel 2.6.16.35

linux linux kernel 2.6.19.6

linux linux kernel 2.6.16.50

linux linux kernel 2.6.25.11

linux linux kernel 2.6.27.31

linux linux kernel 2.6.29.2

linux linux kernel 2.6.23.5

linux linux kernel 2.6.22.8

linux linux kernel 2.6.14.2

linux linux kernel 2.6.16.61

linux linux kernel 2.6.19.5

linux linux kernel 2.6.18

linux linux kernel 2.6.27.24

linux linux kernel 2.6.20.4

linux linux kernel 2.6.17.6

linux linux kernel 2.6.23.6

linux linux kernel 2.6.27.2

linux linux kernel 2.6.16.7

linux linux kernel 2.6.17.13

linux linux kernel 2.6.16.60

linux linux kernel 2.6.22.2

linux linux kernel 2.6.8.1

linux linux kernel 2.6.27.11

linux linux kernel 2.6.16.56

linux linux kernel 2.6.22.19

linux linux kernel 2.6.24.3

linux linux kernel 2.6.31.2

linux linux kernel 2.6.25

linux linux kernel 2.6.20.14

linux linux kernel 2.6.25.2

linux linux kernel 2.6.22.5

linux linux kernel 2.6.25.7

linux linux kernel 2.6.30.5

linux linux kernel 2.6.25.14

linux linux kernel 2.6.20.7

linux linux kernel 2.6.28.1

linux linux kernel 2.6.16.5

linux linux kernel 2.6.30

linux linux kernel 2.6.11.4

linux linux kernel 2.6.26.4

linux linux kernel 2.6.25.12

linux linux kernel 2.6.16.19

linux linux kernel 2.6.27.6

linux linux kernel 2.6.26.7

linux linux kernel 2.6.25.6

linux linux kernel 2.6.11.12

linux linux kernel 2.6.16.20

linux linux kernel 2.6.15.5

linux linux kernel 2.6.28.10

linux linux kernel 2.6.22.16

linux linux kernel 2.6.11.1

linux linux kernel 2.6.30.3

linux linux kernel 2.6.9

linux linux kernel 2.6.27.23

linux linux kernel 2.6.13.1

linux linux kernel 2.6.23.11

linux linux kernel 2.6.27.14

linux linux kernel 2.6.28

linux linux kernel 2.6.29.5

linux linux kernel 2.6.22.14

linux linux kernel 2.6.6

linux linux kernel 2.6.12

Vendor Advisories

Ubuntu Security Notice: linux vulnerability
David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets A remote attacker could send specially crafted traffic that would cause a system to crash, leading to a denial of service (The fix was included in the earlier kernels from USN-864-1) (CVE-2009-1298) ...

Exploits

Exploit DB: Linux Kernel 2.6.x - Ext4 'move extents' ioctl Privilege Escalation
source: wwwsecurityfocuscom/bid/37277/info Linux kernel is prone to a local privilege-escalation vulnerability because the software fails to verify access permissions Exploits may allow attackers to execute arbitrary code with kernel-level privileges and launch other attacks Successful exploits will result in the complete compromise o ...

References

CWE-264http://www.securityfocus.com/bid/37277http://www.vupen.com/english/advisories/2009/3468http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git6.loghttp://secunia.com/advisories/37658http://lkml.org/lkml/2009/12/9/255https://bugzilla.redhat.com/show_bug.cgi?id=544471http://www.ubuntu.com/usn/USN-869-1http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00702.htmlhttp://secunia.com/advisories/37686http://www.mandriva.com/security/advisories?name=MDVSA-2009:329http://secunia.com/advisories/38017http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.htmlhttp://git.kernel.org/?p=linux/kernel/git/tytso/ext4.git%3Ba=commit%3Bh=4a58579b9e4e2a35d57e6c9c8483e52f6f1b7fd6https://usn.ubuntu.com/869-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/33395/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook