EUVD-2010-2085

Malware in sbrugna...

Design/Logic Flaw

The mextcheckarguments function in fs/ext4/moveextent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVEEXT ioctl call that specifies this file as a donor...

CVE-2010-2066

CVE-2010-2066 affects the Linux kernel up to version 2.6.34. The flaw is in fs/ext4/move_extent.c: the mext_check_arguments routine, which can allow a local attacker to overwrite an append-only file when using the MOVE_EXT ioctl and designating that file as the donor. The issue arises from insuff...