Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-4210
HistorySep 29, 2008 - 5:17 p.m.

CVE-2008-4210

2008-09-2917:17:29
CWE-264
[email protected]
web.nvd.nist.gov
58
3
linux kernel
privilege escalation
cve-2008-4210
nvd
security vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

High

EPSS

0

Percentile

0.4%

JSON

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.

Affected configurations

NVD
Node
linuxlinux_kernelRange≤2.6.21.7
OR
linuxlinux_kernelMatch2.2.27
OR
linuxlinux_kernelMatch2.4.36
OR
linuxlinux_kernelMatch2.4.36.1
OR
linuxlinux_kernelMatch2.4.36.2
OR
linuxlinux_kernelMatch2.4.36.3
OR
linuxlinux_kernelMatch2.4.36.4
OR
linuxlinux_kernelMatch2.4.36.5
OR
linuxlinux_kernelMatch2.4.36.6
OR
linuxlinux_kernelMatch2.6
OR
linuxlinux_kernelMatch2.6.18
OR
linuxlinux_kernelMatch2.6.18rc1
OR
linuxlinux_kernelMatch2.6.18rc2
OR
linuxlinux_kernelMatch2.6.18rc3
OR
linuxlinux_kernelMatch2.6.18rc4
OR
linuxlinux_kernelMatch2.6.18rc5
OR
linuxlinux_kernelMatch2.6.18rc6
OR
linuxlinux_kernelMatch2.6.18rc7
OR
linuxlinux_kernelMatch2.6.19.4
OR
linuxlinux_kernelMatch2.6.19.5
OR
linuxlinux_kernelMatch2.6.19.6
OR
linuxlinux_kernelMatch2.6.19.7
OR
linuxlinux_kernelMatch2.6.20.16
OR
linuxlinux_kernelMatch2.6.20.17
OR
linuxlinux_kernelMatch2.6.20.18
OR
linuxlinux_kernelMatch2.6.20.19
OR
linuxlinux_kernelMatch2.6.20.20
OR
linuxlinux_kernelMatch2.6.20.21
OR
linuxlinux_kernelMatch2.6.21.5
OR
linuxlinux_kernelMatch2.6.21.6
VendorProductVersionCPE
linuxlinux_kernel2.4.36.3cpe:/o:linux:linux_kernel:2.4.36.3:::
linuxlinux_kernel2.6.18cpe:/o:linux:linux_kernel:2.6.18:rc3::
linuxlinux_kernel2.6.20.17cpe:/o:linux:linux_kernel:2.6.20.17:::
linuxlinux_kernel2.6.18cpe:/o:linux:linux_kernel:2.6.18:rc1::
linuxlinux_kernel2.4.36cpe:/o:linux:linux_kernel:2.4.36:::
linuxlinux_kernel2.6.20.21cpe:/o:linux:linux_kernel:2.6.20.21:::
linuxlinux_kernel2.6.19.4cpe:/o:linux:linux_kernel:2.6.19.4:::
linuxlinux_kernel2.6.19.7cpe:/o:linux:linux_kernel:2.6.19.7:::
linuxlinux_kernel2.6.19.5cpe:/o:linux:linux_kernel:2.6.19.5:::
linuxlinux_kernel2.6.20.16cpe:/o:linux:linux_kernel:2.6.20.16:::
Rows per page:
1-10 of 301

References

Social References

More

Related

ubuntucve 2
seebug 1
cvelist 2
nvd 2
prion 2
veracode 1
cve 1
openvas 33
nessus 22
suse 3
oraclelinux 4
centos 4
redhat 5
osv 1
securityvulns 3
debian 1
ubuntu 1
vmware 2
ubuntucve
ubuntucve
CVE-2008-4210
2008-09-29 00:00:00
CVE-2008-3833
2008-10-03 00:00:00
seebug
seebug
Linux Kernel 'truncate()'本地特权提升漏洞
2008-09-27 00:00:00
cvelist
cvelist
CVE-2008-4210
2008-09-29 17:00:00
CVE-2008-3833
2008-10-03 17:18:00
nvd
nvd
CVE-2008-4210
2008-09-29 17:17:29
CVE-2008-3833
2008-10-03 17:41:40
prion
prion
Design/Logic Flaw
2008-09-29 17:17:00
Design/Logic Flaw
2008-10-03 17:41:00
veracode
veracode
Privilege Escalation
2020-04-10 00:28:05
cve
cve
CVE-2008-3833
2008-10-03 17:41:40
openvas
openvas
SuSE Update for kernel SUSE-SA:2008:056
2009-01-23 00:00:00
SLES9: Security update for Linux kernel
2009-10-10 00:00:00
SLES9: Security update for Linux kernel
2009-10-10 00:00:00
nessus
nessus
SuSE 10 Security Update : Linux Kernel (x86) (ZYPP Patch Number 5734)
2008-12-03 00:00:00
SuSE 10 Security Update : Linux Kernel (x86_64) (ZYPP Patch Number 5735)
2012-05-17 00:00:00
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5668)
2009-09-24 00:00:00
suse
suse
denial of service in kernel
2008-12-03 11:07:23
denial of service in kernel
2008-12-04 18:25:26
local privilege escalation in kernel
2008-10-21 11:36:32
oraclelinux
oraclelinux
kernel security and bug fix update
2008-11-19 00:00:00
kernel security and bug fix update
2008-12-18 00:00:00
kernel security and bug fix update
2008-11-05 00:00:00
centos
centos
kernel security update
2008-11-20 14:26:01
kernel security update
2008-12-17 15:30:17
kernel security update
2008-11-05 16:01:40
redhat
redhat
(RHSA-2008:0972) Important: kernel security and bug fix update
2008-11-19 00:00:00
(RHSA-2008:0973) Important: kernel security and bug fix update
2008-12-16 00:00:00
(RHSA-2008:0957) Important: kernel security and bug fix update
2008-11-04 00:00:00
osv
osv
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2008-10-13 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
2008-10-14 00:00:00
Linux kernel multiple security vulnerabilities
2008-10-18 00:00:00
NGS000267 Technical Advisory: Symantec Messaging Gateway SSH with backdoor user account plus privilege escalation to root due to very old Kernel
2012-12-02 00:00:00
debian
debian
[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
2008-10-13 20:25:41
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-11-27 00:00:00
vmware
vmware
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

High

EPSS

0

Percentile

0.4%

JSON
Related for CVE-2008-4210
ubuntucve2seebug1cvelist2nvd2prion2veracode1cve1openvas33nessus22suse3oraclelinux4centos4redhat5osv1securityvulns3debian1ubuntu1vmware2