CVE-2008-2148 - CVE Reference - Advisories

CVE Reference: CVE-2008-2148

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2148

Description: The utimensat system call (sys_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when certain UTIME_NOW and UTIME_OMIT combinations are used, which allows local users to modify file times of arbitrary files, possibly leading to a denial of service.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42342 UBUNTU http://www.ubuntu.com/usn/usn-625-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html SAID Secunia Advisory: SA30241 Secunia Advisory: SA30198 Secunia Advisory: SA30818 Secunia Advisory: SA31107 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.3 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0169 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=f9dfda1ad0637a89a64d001cf81478bd8d9b6306 BID 29134

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

2.	Joomla Community Builder Component File Inclusion

3.	Novell eDirectory Multiple Vulnerabilities

4.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

5.	dotProject SQL Injection and Cross-Site Scripting

6.	Slackware update for amarok

7.	Caudium "configvar" Insecure Temporary Files

8.	phpMyRealty "price_max" SQL Injection Vulnerability

9.	GpsDrive "geo-code" Insecure Temporary Files

10.	Adium MSN SLP Message Integer Overflow Vulnerabilities