Lucene search

PRIOn knowledge basePRION:CVE-2010-2946

HistorySep 29, 2010 - 5:00 p.m.

Design/Logic Flaw

2010-09-2917:00:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

8.3%

JSON

fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an “os2.” substring at the beginning of a name.

CPENameOperatorVersion
ubuntu_linuxeq10.10
ubuntu_linuxeq6.06
ubuntu_linuxeq9.04
ubuntu_linuxeq8.04
ubuntu_linuxeq10.04
ubuntu_linuxeq9.10
linux_kernellt2.6.35.2

Name	Operator	Version
ubuntu_linux	eq	10.10
ubuntu_linux	eq	6.06
ubuntu_linux	eq	9.04
ubuntu_linux	eq	8.04
ubuntu_linux	eq	10.04
ubuntu_linux	eq	9.10
linux_kernel	lt	2.6.35.2

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aca0fa34bdaba39bfddddba8ca70dba4782e8fe6

lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html

lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html

lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html

lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html

secunia.com/advisories/41321

secunia.com/advisories/43291

www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.10

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.51

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.2

www.mandriva.com/security/advisories?name=MDVSA-2011:051

www.openwall.com/lists/oss-security/2010/08/20/1

www.openwall.com/lists/oss-security/2010/08/20/11

www.securityfocus.com/bid/42589

www.ubuntu.com/usn/USN-1000-1

www.vupen.com/english/advisories/2011/0298

www.vupen.com/english/advisories/2011/0375

6.6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

8.3%

JSON

Related for PRION:CVE-2010-2946