CVE-2010-4347
7.2 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%
The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ed3aada1bf34c5a9e98af167f125f8a740fc726a
lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
openwall.com/lists/oss-security/2010/12/15/3
openwall.com/lists/oss-security/2010/12/15/7
secunia.com/advisories/42778
www.exploit-db.com/exploits/15774/
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2
www.securityfocus.com/bid/45408
www.vupen.com/english/advisories/2011/0012
www.vupen.com/english/advisories/2011/0298
bugzilla.redhat.com/show_bug.cgi?id=663542
exchange.xforce.ibmcloud.com/vulnerabilities/64155
Social References
More
Related
7.2 High
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%