Lucene search

[email protected]CVE-2008-3833

HistoryOct 03, 2008 - 5:41 p.m.

CVE-2008-3833

2008-10-0317:41:40

CWE-264

[email protected]

web.nvd.nist.gov

linux kernel

privilege escalation

fs/splice.c

cve-2008-3833

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

10.1%

JSON

The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by splicing into an inode in order to create an executable file in a setgid directory, a different vulnerability than CVE-2008-4210.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤2.6.26.4

linuxlinux_kernelMatch2.2.27

linuxlinux_kernelMatch2.4.36

linuxlinux_kernelMatch2.4.36.1

linuxlinux_kernelMatch2.4.36.2

linuxlinux_kernelMatch2.4.36.3

linuxlinux_kernelMatch2.4.36.4

linuxlinux_kernelMatch2.4.36.5

linuxlinux_kernelMatch2.4.36.6

linuxlinux_kernelMatch2.6

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18rc1

linuxlinux_kernelMatch2.6.18rc2

linuxlinux_kernelMatch2.6.18rc3

linuxlinux_kernelMatch2.6.18rc4

linuxlinux_kernelMatch2.6.18rc5

linuxlinux_kernelMatch2.6.18rc6

linuxlinux_kernelMatch2.6.18rc7

linuxlinux_kernelMatch2.6.19.4

linuxlinux_kernelMatch2.6.19.5

linuxlinux_kernelMatch2.6.19.6

linuxlinux_kernelMatch2.6.19.7

linuxlinux_kernelMatch2.6.20.16

linuxlinux_kernelMatch2.6.20.17

linuxlinux_kernelMatch2.6.20.18

linuxlinux_kernelMatch2.6.20.19

linuxlinux_kernelMatch2.6.20.20

linuxlinux_kernelMatch2.6.20.21

linuxlinux_kernelMatch2.6.21.5

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.1

linuxlinux_kernelMatch2.6.22.2

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.9

linuxlinux_kernelMatch2.6.22.10

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.22.18

linuxlinux_kernelMatch2.6.22.19

linuxlinux_kernelMatch2.6.22.20

linuxlinux_kernelMatch2.6.22.21

linuxlinux_kernelMatch2.6.22.22

linuxlinux_kernelMatch2.6.22_rc1

linuxlinux_kernelMatch2.6.22_rc7

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.8

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.10

linuxlinux_kernelMatch2.6.23.11

linuxlinux_kernelMatch2.6.23.12

linuxlinux_kernelMatch2.6.23.13

linuxlinux_kernelMatch2.6.23.15

linuxlinux_kernelMatch2.6.23.16

linuxlinux_kernelMatch2.6.23.17

linuxlinux_kernelMatch2.6.24

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.26.1

linuxlinux_kernelMatch2.6.26.2

linuxlinux_kernelMatch2.6.26.3

VendorProductVersionCPE
linuxlinux_kernel2.6.20.16cpe:/o:linux:linux_kernel:2.6.20.16:::
linuxlinux_kernel2.6.26.2cpe:/o:linux:linux_kernel:2.6.26.2:::
linuxlinux_kernel2.6.19.4cpe:/o:linux:linux_kernel:2.6.19.4:::
linuxlinux_kernel2.6.26.3cpe:/o:linux:linux_kernel:2.6.26.3:::
linuxlinux_kernel2.6.23.9cpe:/o:linux:linux_kernel:2.6.23.9:::
linuxlinux_kernel2.6.22.14cpe:/o:linux:linux_kernel:2.6.22.14:::
linuxlinux_kernel2.6.21.7cpe:/o:linux:linux_kernel:2.6.21.7:::
linuxlinux_kernel2.4.36.1cpe:/o:linux:linux_kernel:2.4.36.1:::
linuxlinux_kernel2.6.18cpe:/o:linux:linux_kernel:2.6.18:::
linuxlinux_kernel2.6.20.18cpe:/o:linux:linux_kernel:2.6.20.18:::

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.20.16	cpe:/o:linux:linux_kernel:2.6.20.16:::
linux	linux_kernel	2.6.26.2	cpe:/o:linux:linux_kernel:2.6.26.2:::
linux	linux_kernel	2.6.19.4	cpe:/o:linux:linux_kernel:2.6.19.4:::
linux	linux_kernel	2.6.26.3	cpe:/o:linux:linux_kernel:2.6.26.3:::
linux	linux_kernel	2.6.23.9	cpe:/o:linux:linux_kernel:2.6.23.9:::
linux	linux_kernel	2.6.22.14	cpe:/o:linux:linux_kernel:2.6.22.14:::
linux	linux_kernel	2.6.21.7	cpe:/o:linux:linux_kernel:2.6.21.7:::
linux	linux_kernel	2.4.36.1	cpe:/o:linux:linux_kernel:2.4.36.1:::
linux	linux_kernel	2.6.18	cpe:/o:linux:linux_kernel:2.6.18:::
linux	linux_kernel	2.6.20.18	cpe:/o:linux:linux_kernel:2.6.20.18:::