ID:4404 - Exploit for Permissions, Privileges, and Access Controls in Linux kernel - CVE-2011-1021

 
Main Vulnerability Database Exploits ID:4404 - Exploit for Permissions, Privileges, and Access Controls in Linux kernel - CVE-2011-1021

ID:4404 - Exploit for Permissions, Privileges, and Access Controls in Linux kernel - CVE-2011-1021

Published: August 11, 2020


Vulnerability identifier: #VU43964
Vulnerability risk: Medium
CVE-ID: CVE-2011-1021
CWE-ID: CWE-264
Exploitation vector: Remote access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to manipulate or delete data.

drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347.


Remediation

Install update from vendor's website.