CVE-2009-1337 | AttackerKB

Description

The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

Vendors

linux

Products

References

Canonical

CVE-2009-1337 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337)

BID-34405 (http://www.securityfocus.com/bid/34405)

Advisory

SECUNIA-35390 (http://secunia.com/advisories/35390)

http://www.mandriva.com/security/advisories?name=MDVSA-2009:135

20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel (http://www.securityfocus.com/archive/1/512019/100/0/threaded)

SECUNIA-35226 (http://secunia.com/advisories/35226)

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html

SECUNIA-37471 (http://secunia.com/advisories/37471)

SECUNIA-35160 (http://secunia.com/advisories/35160)

FEDORA-2009-5356 (https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html)

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html

[oss-security] 20090407 CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check (http://www.openwall.com/lists/oss-security/2009/04/07/1)

SECUNIA-35656 (http://secunia.com/advisories/35656)

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

https://bugzilla.redhat.com/show_bug.cgi?id=493771

http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=432870dab85a2f69dc417022646cb9a70acf7f94

DSA-1794 (http://www.debian.org/security/2009/dsa-1794)

20090516 rPSA-2009-0084-1 kernel (http://www.securityfocus.com/archive/1/503610/100/0/threaded)

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

[linux-kernel] 20090225 Re: [PATCH 2/2] exit_notify: kill the wrong capable(CAP_KILL) check (http://marc.info?l=linux-kernel&m=123560588713763&w=2)

SECUNIA-35324 (http://secunia.com/advisories/35324)

SECUNIA-35185 (http://secunia.com/advisories/35185)

SECUNIA-35015 (http://secunia.com/advisories/35015)

http://patchwork.kernel.org/patch/16544

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11206

SECUNIA-35011 (http://secunia.com/advisories/35011)

20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (http://www.securityfocus.com/archive/1/507985/100/0/threaded)

SECUNIA-35120 (http://secunia.com/advisories/35120)

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

USN-793-1 (http://www.ubuntu.com/usn/usn-793-1)

SECUNIA-34981 (http://secunia.com/advisories/34981)

DSA-1800 (http://www.debian.org/security/2009/dsa-1800)

http://www.redhat.com/support/errata/RHSA-2009-1077.html

SECTRACK-1022141 (http://www.securitytracker.com/id?1022141)

SECUNIA-35387 (http://secunia.com/advisories/35387)

SECUNIA-34917 (http://secunia.com/advisories/34917)

https://rhn.redhat.com/errata/RHSA-2009-1550.html

DSA-1787 (http://www.debian.org/security/2009/dsa-1787)

http://www.redhat.com/support/errata/RHSA-2009-1024.html

http://www.mandriva.com/security/advisories?name=MDVSA-2009:119

[oss-security] 20090417 Re: CVE request: kernel: exit_notify: kill the wrong capable(CAP_KILL) check (http://www.openwall.com/lists/oss-security/2009/04/17/3)

http://rhn.redhat.com/errata/RHSA-2009-0473.html

http://wiki.rpath.com/Advisories:rPSA-2009-0084

http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc1

http://www.redhat.com/support/errata/RHSA-2009-0451.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8295

SECUNIA-35121 (http://secunia.com/advisories/35121)

ADV-2009-3316 (http://www.vupen.com/english/advisories/2009/3316)

SECUNIA-35394 (http://secunia.com/advisories/35394)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10919

Rapid7

Technical Analysis