Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2008-3525
HistorySep 03, 2008 - 2:12 p.m.

Cross site request forgery (csrf)

2008-09-0314:12:00
PRIOn knowledge base
www.prio-n.com
4

5.9 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.3%

JSON

The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.

CPENameOperatorVersion
linux_kerneleq2.6.26.3

References

Related

ubuntucve 1
cve 1
openvas 42
nessus 20
suse 5
debian 2
securityvulns 3
osv 2
fedora 6
redhat 3
centos 2
oraclelinux 1
ubuntu 1
vmware 2
ubuntucve
ubuntucve
CVE-2008-3525
2008-09-03 00:00:00
cve
cve
CVE-2008-3525
2008-09-03 14:12:00
openvas
openvas
SuSE Update for kernel SUSE-SA:2008:051
2009-01-23 00:00:00
Debian: Security Advisory (DSA-1655-1)
2008-11-01 00:00:00
SLES10: Security update for Linux kernel
2009-10-13 00:00:00
nessus
nessus
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5668)
2009-09-24 00:00:00
Mandriva Linux Security Advisory : kernel (MDVSA-2008:223)
2009-04-23 00:00:00
Debian DSA-1655-1 : linux-2.6.24 - denial of service/information leak/privilege escalation
2008-10-20 00:00:00
suse
suse
local privilege escalation in kernel
2008-10-21 11:36:32
remote denial of service in kernel
2008-10-01 15:09:37
remote denial of service in kernel
2008-10-02 11:55:46
debian
debian
[SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities
2008-10-17 00:19:48
[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
2008-10-13 20:25:41
securityvulns
securityvulns
[SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities
2008-10-18 00:00:00
[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
2008-10-14 00:00:00
Linux kernel multiple security vulnerabilities
2008-10-18 00:00:00
osv
osv
linux-2.6.24 - several vulnerabilities
2008-10-16 00:00:00
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2008-10-13 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: kernel-2.6.26.6-49.fc8
2008-10-23 16:38:12
[SECURITY] Fedora 9 Update: kernel-2.6.26.6-79.fc9
2008-10-23 16:39:28
[SECURITY] Fedora 9 Update: kernel-2.6.27.12-78.2.8.fc9
2009-01-27 01:54:28
redhat
redhat
(RHSA-2008:0973) Important: kernel security and bug fix update
2008-12-16 00:00:00
(RHSA-2009:0001) Important: kernel security update
2009-01-08 00:00:00
(RHSA-2008:0787) Important: kernel security update
2009-01-05 00:00:00
centos
centos
kernel security update
2008-12-17 15:30:17
kernel security update
2009-02-02 23:36:06
oraclelinux
oraclelinux
kernel security and bug fix update
2008-12-18 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-10-27 00:00:00
vmware
vmware
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00
VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues
2009-10-16 00:00:00

5.9 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.3%

JSON
Related for PRION:CVE-2008-3525
ubuntucve1cve1openvas42nessus20suse5debian2securityvulns3osv2fedora6redhat3centos2oraclelinux1ubuntu1vmware2