CVE-2007-3848 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3848
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3848

Description: Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-508-1 http://www.ubuntu.com/usn/usn-509-1 http://www.ubuntu.com/usn/usn-510-1 SUSE http://www.novell.com/linux/security/advisories/2007_53_kernel.html http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html SAID Secunia Advisory: SA27436 Secunia Advisory: SA27322 Secunia Advisory: SA26651 Secunia Advisory: SA26643 Secunia Advisory: SA26450 Secunia Advisory: SA26500 Secunia Advisory: SA26664 Secunia Advisory: SA27212 Secunia Advisory: SA27227 Secunia Advisory: SA27747 Secunia Advisory: SA27913 Secunia Advisory: SA28806 Secunia Advisory: SA29058 Secunia Advisory: SA29570 Secunia Advisory: SA33280 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0787.html http://www.redhat.com/support/errata/RHSA-2007-1049.html http://www.redhat.com/support/errata/RHSA-2007-0939.html http://www.redhat.com/support/errata/RHSA-2007-0940.html MLIST http://marc.info/?l=openwall-announce&m=118710356812637&w=2 MISC http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3848 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:195 http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 DEBIAN http://www.debian.org/security/2008/dsa-1503 http://www.debian.org/security/2008/dsa-1504 http://www.debian.org/security/2007/dsa-1356 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/476464/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/476538/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/476803/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/476677/100/0/threaded http://marc.info/?l=bugtraq&m=118711306802632&w=2 BID 25387

Return to the previous page.