CERT-MU :Advisories

Home | Search | FAQ | Site Map | Contact Us

|| Hotline : 800 2378 || To contact CERT-MU send e-mail on --> info[at]cert-mu.gov.mu || To report incident e-mail on --> incident[at]cert-mu.gov.mu || To report Vulnerabilities send e-mail on --> Vulnerability[at]cert-mu.gov.mu ||

Charter & Mission

CERT-MU Services

Constituency

Authority

Incident Reporting

Vulnerability Reporting

Incident Statistics Forms

Vol. 2, Feb 2012

Vol. 1, Oct 2011

World CERTs

Security Sites

Security Tools

Antivirus Resources

Email Abuse

Network Abuse

Anti-Spam Initiative

Cyber Security Portal

Safer Internet Day

Computer Security Day

National Computer Board

Authorized to use CERT(TM) - CERT is a mark owned by Carnegie Mellon University

CERT-MU AD-2009-15

Multiple Vulnerabilities in Linux Kernel

Original issue date: 30 September, 2009

Overview

Multiple vulnerabilities has been reported in Linux Kernel, which could allow attackers to potentially gain escalated privileges, cause Denial of Service conditions or execution of an arbitrary code.

Description

'find_ie()' Function Remote Denial of Service Vulnerability

This vulnerability is caused due to an Integer signedness error when processing malformed packets in the "find_ie" [net/wireless/scan.c] function in the cfg80211 subsystem in the Linux kernel before 2.6.31.1-rc1. A remote attacker could exploit this vulnerability by sending specially crafted packets to trigger an infinite loop causes denial of service condition.

Note: This issue does not affect versions prior to 2.6.30.

'perf_counter_open()' Local Buffer Overflow Vulnerability

This vulnerability is caused by improper updation of domain name within the collapsed address bar, which could cause the previous domain to be shown instead of the domain of the present site.This could be exploited by remote attackers to spoof URLs.

Note: This issue does not affect versions prior to 2.6.31.

'O_EXCL' NFSv4 Privilege Escalation Vulnerability

This vulnerability is caused due to improper clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits in the Linux kernel before 2.6.19-rc6. An attacker could exploit this vulnerability to execute an arbitrary code with the elevated privileges.