CVE-2008-1294 - Secunia.com

CVE Reference: CVE-2008-1294
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1294

Description: Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is made, which allows local users to bypass intended resource limits.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42145 UBUNTU http://www.ubuntu.com/usn/usn-618-1 SAID Secunia Advisory: SA30769 Secunia Advisory: SA31341 Secunia Advisory: SA30018 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0612.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10974 MISC http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9926e4c74300c4b31dee007298c6475d33369df0 DEBIAN http://www.debian.org/security/2008/dsa-1565 CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=215000 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 BID 29004

Return to the previous page.

Secunia