PT-2010-3682 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl, due to the btrfs xattr set acl function in fs/btrfs/acl.c not checking file...

CVE-2010-1636

The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...

Design/Logic Flaw

The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...

CVE-2010-1636

The CVE-2010-1636 issue affects the Linux kernel’s btrfs_ioctl_clone path (fs/btrfs/ioctl.c) where cloned file descriptors are not guaranteed to be opened for reading, allowing local users to read from a write-only descriptor. Affected: 2.6.29–2.6.32 (and possibly other versions). Impact: potenti...

CVE-2010-1636

The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...

PT-2010-3298 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.29 through 2.6.32 Description: The issue arises from the btrfs ioctl clone function in fs/btrfs/ioctl.c, which does not verify if a cloned file descriptor is opened for reading. This oversight allows local users to...

CVE-2010-1636

The btrfsioctlclone function in fs/btrfs/ioctl.c in the btrfs functionality in the Linux kernel 2.6.29 through 2.6.32, and possibly other versions, does not ensure that a cloned file descriptor has been opened for reading, which allows local users to read sensitive information from a write-only...

linux kernel 2.6. x-Btrfs for creating unsafe clone file vulnerability-vulnerability warning-the black bar safety net

Affected version: Linux kernel 2.6. x Vulnerability description: The Linux Kernel is open sourceOSLinux the kernel. Linux Kernel Btrfs implementation in btrfsioctlclone to ioctl will be provided by the user, the source file descriptor is copied to the target file descriptor, but in the...

Linux kernel 2.6.x Btrfs实现创建不安全克隆文件漏洞

BUGTRAQ ID: 40241 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Btrfs实现中btrfsioctlclone ioctl将用户所提供的源文件描述符拷贝到了目标文件描述符，但在执行拷贝操作之前没有检查源文件描述符是否已被打开读取，这允许攻击者无需拥有读权限便可读取克隆的文件。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass / source: https://www.securityfocus.com/bid/40241/info The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation. An attacker can exploit this issue to clone a file only open for writing. Th...

Linux Kernel 2.6.x - Btrfs Cloned File Security Bypass

/ source: https://www.securityfocus.com/bid/40241/info The Linux Kernel is prone to a security-bypass vulnerability that affects the Btrfs filesystem implementation. An attacker can exploit this issue to clone a file only open for writing. This may allow attackers to obtain sensitive data or laun...

PT-2010-5665 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue concerns multiple...

PT-2010-5669 · Suse +2 · Suse Linux Enterprise Kernel-Desktop-Devel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 SUSE Linux Enterprise kernel-desktop-devel affected versions not specified SUSE Linux Enterprise btrfs-kmp-xen affected versions not specified SUSE Linux Enterprise btrfs-kmp-pae affected versions not...

PT-2010-5666 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39.4 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue allows local users to...

PT-2010-5668 · Suse +1 · Suse Linux Enterprise +4

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to the fixed version btrfs-kmp-xen versions affected versions not specified btrfs-kmp-pae versions affected versions not specified kernel-desktop-devel versions affected versions not specified Description:...