Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2071
HistoryJun 16, 2010 - 12:00 a.m.

CVE-2010-2071

2010-06-1600:00:00
ubuntu.com
ubuntu.com
12

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux
kernel 2.6.34 and earlier does not check file ownership before setting an
ACL, which allows local users to bypass file permissions by setting
arbitrary ACLs, as demonstrated using setfacl.

Notes

Author Note
smb Btrfs did not appear before Karmic
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchlinux< 2.6.31-22.61UNKNOWN
ubuntu10.04noarchlinux< 2.6.32-24.39UNKNOWN

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%