CVE-2007-4308 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-4308
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4308

Description: The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-508-1 http://www.ubuntu.com/usn/usn-509-1 http://www.ubuntu.com/usn/usn-510-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html ST 1019470 SAID Secunia Advisory: SA26643 Secunia Advisory: SA26322 Secunia Advisory: SA26647 Secunia Advisory: SA26651 Secunia Advisory: SA27322 Secunia Advisory: SA27436 Secunia Advisory: SA27212 Secunia Advisory: SA27747 Secunia Advisory: SA27912 Secunia Advisory: SA27913 Secunia Advisory: SA28806 Secunia Advisory: SA29032 Secunia Advisory: SA29058 Secunia Advisory: SA29570 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0939.html http://www.redhat.com/support/errata/RHSA-2007-1049.html http://www.redhat.com/support/errata/RHSA-2007-0940.html MLIST http://lists.vmware.com/pipermail/security-announce/2008/000005.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 http://www.mandriva.com/security/advisories?name=MDKSA-2007:195 DEBIAN http://www.debian.org/security/2008/dsa-1504 http://www.debian.org/security/2008/dsa-1503 http://www.debian.org/security/2007/dsa-1363 CONFIRM http://lkml.org/lkml/2007/7/23/195 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488457/100/0/threaded BID 25216

Return to the previous page.