Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2008-4554

Опубликовано: 09 окт. 2008
Источник: redhat

Описание

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=466707kernel: don't allow splice() to files opened with O_APPEND

Связанные уязвимости

ubuntu
больше 16 лет назад

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

nvd
больше 16 лет назад

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

debian
больше 16 лет назад

The do_splice_from function in fs/splice.c in the Linux kernel before ...

github
около 3 лет назад

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to other locations in the file.

oracle-oval
больше 16 лет назад

ELSA-2008-1017: kernel security and bug fix update (IMPORTANT)