[Forgot Password]
Login  Register Subscribe

23631

 
 

115036

 
 

95906

 
 

909

 
 

77949

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-3911

Date: (C)2008-09-04   (M)2017-08-08
 
CVSS Score: 7.2Access Vector: LOCAL
Exploitability Subscore: 3.9Access Complexity: LOW
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file.

Reference:
BID-31937
SUSE-SA:2008:053
http://lkml.org/lkml/2008/8/30/184
http://lkml.org/lkml/2008/8/30/140
http://www.openwall.com/lists/oss-security/2008/09/04/2
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=27df6f25ff218072e0e879a96beeb398a79cdbc8
linux-kernel-procdoxprt-bo(45136)

CPE    1
cpe:/o:linux:linux_kernel:2.6.26.3
CWE    1
CWE-119

© 2013 SecPod Technologies