Improper privilege management in Linux kernel - CVE-2008-0001

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU93743

Improper privilege management in Linux kernel - CVE-2008-0001

Published: January 15, 2008 / Updated: February 13, 2023


Vulnerability identifier: #VU93743
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2008-0001
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to manipulate or delete data.

VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.


Affected software

Linux kernel

How to mitigate CVE-2008-0001

Install update from vendor's website.


External References

Related Security Bulletins