logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2008-3525

Description

The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.


Affected Package


OS OS Version Package Name Package Version
ubuntu 08.04 linux 2.6.24-21.43
ubuntu upstream linux any
ubuntu upstream linux-source-2.6.15 any
ubuntu upstream linux-source-2.6.20 any
ubuntu 07.10 linux-source-2.6.22 2.6.22-15.59
ubuntu upstream linux-source-2.6.22 any

Related