Secunia Logo
 
CVE Reference: CVE-2008-1669
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-1669

Description:
Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/42242

UBUNTU
  http://www.ubuntulinux.org/support/documentation/usn/usn-614-1
  http://www.ubuntu.com/usn/usn-618-1

SUSE
  http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
  http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
  http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
  http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

ST
  1019974

SAID
  Secunia Advisory: SA30276
  Secunia Advisory: SA30252
  Secunia Advisory: SA30260
  Secunia Advisory: SA30077
  Secunia Advisory: SA30108
  Secunia Advisory: SA30164
  Secunia Advisory: SA30515
  Secunia Advisory: SA30769
  Secunia Advisory: SA30818
  Secunia Advisory: SA30962
  Secunia Advisory: SA31246
  Secunia Advisory: SA30101
  Secunia Advisory: SA30110
  Secunia Advisory: SA30112
  Secunia Advisory: SA30116

REDHAT
  http://www.redhat.com/support/errata/RHSA-2008-0237.html
  http://www.redhat.com/support/errata/RHSA-2008-0211.html
  http://www.redhat.com/support/errata/RHSA-2008-0233.html

MLIST
  http://lists.vmware.com/pipermail/security-announce/2008/000023.html

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:104
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

FEDORA

DEBIAN
  http://www.debian.org/security/2008/dsa-1575

CONFIRM
  http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162
  http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4
  http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/491740/100/0/threaded

BID
  29076


Return to the previous page.