Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2009-3889

Disclosure Date: November 16, 2009 •
CVE-2009-3889
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

The dbg_lvl file for the megaraid_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the (1) behavior and (2) logging level of the driver by modifying this file.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
n/a
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • linux

Products

  • linux kernel,
  • linux kernel 2.6.0,
  • linux kernel 2.6.1,
  • linux kernel 2.6.10,
  • linux kernel 2.6.11,
  • linux kernel 2.6.11.1,
  • linux kernel 2.6.11.10,
  • linux kernel 2.6.11.11,
  • linux kernel 2.6.11.12,
  • linux kernel 2.6.11.2,
  • linux kernel 2.6.11.3,
  • linux kernel 2.6.11.4,
  • linux kernel 2.6.11.5,
  • linux kernel 2.6.11.6,
  • linux kernel 2.6.11.7,
  • linux kernel 2.6.11.8,
  • linux kernel 2.6.11.9,
  • linux kernel 2.6.12,
  • linux kernel 2.6.12.1,
  • linux kernel 2.6.12.2,
  • linux kernel 2.6.12.3,
  • linux kernel 2.6.12.4,
  • linux kernel 2.6.12.5,
  • linux kernel 2.6.12.6,
  • linux kernel 2.6.13,
  • linux kernel 2.6.13.1,
  • linux kernel 2.6.13.2,
  • linux kernel 2.6.13.3,
  • linux kernel 2.6.13.4,
  • linux kernel 2.6.13.5,
  • linux kernel 2.6.14,
  • linux kernel 2.6.14.1,
  • linux kernel 2.6.14.2,
  • linux kernel 2.6.14.3,
  • linux kernel 2.6.14.4,
  • linux kernel 2.6.14.5,
  • linux kernel 2.6.14.6,
  • linux kernel 2.6.14.7,
  • linux kernel 2.6.15,
  • linux kernel 2.6.15.1,
  • linux kernel 2.6.15.2,
  • linux kernel 2.6.15.3,
  • linux kernel 2.6.15.4,
  • linux kernel 2.6.15.5,
  • linux kernel 2.6.15.6,
  • linux kernel 2.6.15.7,
  • linux kernel 2.6.16,
  • linux kernel 2.6.16.1,
  • linux kernel 2.6.16.10,
  • linux kernel 2.6.16.11,
  • linux kernel 2.6.16.12,
  • linux kernel 2.6.16.13,
  • linux kernel 2.6.16.14,
  • linux kernel 2.6.16.15,
  • linux kernel 2.6.16.16,
  • linux kernel 2.6.16.17,
  • linux kernel 2.6.16.18,
  • linux kernel 2.6.16.19,
  • linux kernel 2.6.16.2,
  • linux kernel 2.6.16.20,
  • linux kernel 2.6.16.21,
  • linux kernel 2.6.16.22,
  • linux kernel 2.6.16.23,
  • linux kernel 2.6.16.24,
  • linux kernel 2.6.16.25,
  • linux kernel 2.6.16.26,
  • linux kernel 2.6.16.27,
  • linux kernel 2.6.16.28,
  • linux kernel 2.6.16.29,
  • linux kernel 2.6.16.3,
  • linux kernel 2.6.16.30,
  • linux kernel 2.6.16.31,
  • linux kernel 2.6.16.32,
  • linux kernel 2.6.16.33,
  • linux kernel 2.6.16.34,
  • linux kernel 2.6.16.35,
  • linux kernel 2.6.16.36,
  • linux kernel 2.6.16.37,
  • linux kernel 2.6.16.38,
  • linux kernel 2.6.16.39,
  • linux kernel 2.6.16.4,
  • linux kernel 2.6.16.40,
  • linux kernel 2.6.16.41,
  • linux kernel 2.6.16.42,
  • linux kernel 2.6.16.43,
  • linux kernel 2.6.16.44,
  • linux kernel 2.6.16.45,
  • linux kernel 2.6.16.46,
  • linux kernel 2.6.16.47,
  • linux kernel 2.6.16.48,
  • linux kernel 2.6.16.49,
  • linux kernel 2.6.16.5,
  • linux kernel 2.6.16.50,
  • linux kernel 2.6.16.51,
  • linux kernel 2.6.16.52,
  • linux kernel 2.6.16.53,
  • linux kernel 2.6.16.54,
  • linux kernel 2.6.16.55,
  • linux kernel 2.6.16.56,
  • linux kernel 2.6.16.57,
  • linux kernel 2.6.16.58,
  • linux kernel 2.6.16.59,
  • linux kernel 2.6.16.6,
  • linux kernel 2.6.16.60,
  • linux kernel 2.6.16.61,
  • linux kernel 2.6.16.62,
  • linux kernel 2.6.16.7,
  • linux kernel 2.6.16.8,
  • linux kernel 2.6.16.9,
  • linux kernel 2.6.17,
  • linux kernel 2.6.17.1,
  • linux kernel 2.6.17.10,
  • linux kernel 2.6.17.11,
  • linux kernel 2.6.17.12,
  • linux kernel 2.6.17.13,
  • linux kernel 2.6.17.14,
  • linux kernel 2.6.17.2,
  • linux kernel 2.6.17.3,
  • linux kernel 2.6.17.4,
  • linux kernel 2.6.17.5,
  • linux kernel 2.6.17.6,
  • linux kernel 2.6.17.7,
  • linux kernel 2.6.17.8,
  • linux kernel 2.6.17.9,
  • linux kernel 2.6.18,
  • linux kernel 2.6.18.1,
  • linux kernel 2.6.18.2,
  • linux kernel 2.6.18.3,
  • linux kernel 2.6.18.4,
  • linux kernel 2.6.18.5,
  • linux kernel 2.6.18.6,
  • linux kernel 2.6.18.7,
  • linux kernel 2.6.18.8,
  • linux kernel 2.6.19,
  • linux kernel 2.6.19.1,
  • linux kernel 2.6.19.2,
  • linux kernel 2.6.19.3,
  • linux kernel 2.6.19.4,
  • linux kernel 2.6.19.5,
  • linux kernel 2.6.19.6,
  • linux kernel 2.6.19.7,
  • linux kernel 2.6.2,
  • linux kernel 2.6.20,
  • linux kernel 2.6.20.1,
  • linux kernel 2.6.20.10,
  • linux kernel 2.6.20.11,
  • linux kernel 2.6.20.12,
  • linux kernel 2.6.20.13,
  • linux kernel 2.6.20.14,
  • linux kernel 2.6.20.15,
  • linux kernel 2.6.20.16,
  • linux kernel 2.6.20.17,
  • linux kernel 2.6.20.18,
  • linux kernel 2.6.20.19,
  • linux kernel 2.6.20.2,
  • linux kernel 2.6.20.20,
  • linux kernel 2.6.20.21,
  • linux kernel 2.6.20.3,
  • linux kernel 2.6.20.4,
  • linux kernel 2.6.20.5,
  • linux kernel 2.6.20.6,
  • linux kernel 2.6.20.7,
  • linux kernel 2.6.20.8,
  • linux kernel 2.6.20.9,
  • linux kernel 2.6.21,
  • linux kernel 2.6.21.1,
  • linux kernel 2.6.21.2,
  • linux kernel 2.6.21.3,
  • linux kernel 2.6.21.4,
  • linux kernel 2.6.21.5,
  • linux kernel 2.6.21.6,
  • linux kernel 2.6.21.7,
  • linux kernel 2.6.22,
  • linux kernel 2.6.22.1,
  • linux kernel 2.6.22.10,
  • linux kernel 2.6.22.11,
  • linux kernel 2.6.22.12,
  • linux kernel 2.6.22.13,
  • linux kernel 2.6.22.14,
  • linux kernel 2.6.22.15,
  • linux kernel 2.6.22.16,
  • linux kernel 2.6.22.17,
  • linux kernel 2.6.22.18,
  • linux kernel 2.6.22.19,
  • linux kernel 2.6.22.2,
  • linux kernel 2.6.22.20,
  • linux kernel 2.6.22.21,
  • linux kernel 2.6.22.22,
  • linux kernel 2.6.22.3,
  • linux kernel 2.6.22.4,
  • linux kernel 2.6.22.5,
  • linux kernel 2.6.22.6,
  • linux kernel 2.6.22.7,
  • linux kernel 2.6.22.8,
  • linux kernel 2.6.22.9,
  • linux kernel 2.6.23,
  • linux kernel 2.6.23.1,
  • linux kernel 2.6.23.10,
  • linux kernel 2.6.23.11,
  • linux kernel 2.6.23.12,
  • linux kernel 2.6.23.13,
  • linux kernel 2.6.23.14,
  • linux kernel 2.6.23.15,
  • linux kernel 2.6.23.16,
  • linux kernel 2.6.23.17,
  • linux kernel 2.6.23.2,
  • linux kernel 2.6.23.3,
  • linux kernel 2.6.23.4,
  • linux kernel 2.6.23.5,
  • linux kernel 2.6.23.6,
  • linux kernel 2.6.23.7,
  • linux kernel 2.6.23.8,
  • linux kernel 2.6.23.9,
  • linux kernel 2.6.24,
  • linux kernel 2.6.24.1,
  • linux kernel 2.6.24.2,
  • linux kernel 2.6.24.3,
  • linux kernel 2.6.24.4,
  • linux kernel 2.6.24.5,
  • linux kernel 2.6.24.6,
  • linux kernel 2.6.24.7,
  • linux kernel 2.6.25

References

Canonical
CVE-2009-3889 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3889)
BID-37019 (http://www.securityfocus.com/bid/37019)
Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
USN-864-1 (http://www.ubuntu.com/usn/usn-864-1)
[oss-security] 20091113 Re: CVE request: kernel: bad permissions on megaraid_sas sysfs files (http://www.openwall.com/lists/oss-security/2009/11/13/4)
http://support.avaya.com/css/P8/documents/100073666
SECUNIA-37909 (http://secunia.com/advisories/37909)
OSVDB-60202 (http://osvdb.org/60202)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11018
http://git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
[oss-security] 20091113 CVE request: kernel: bad permissions on megaraid_sas sysfs files (http://www.openwall.com/lists/oss-security/2009/11/13/1)
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
https://rhn.redhat.com/errata/RHSA-2010-0095.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7163
https://rhn.redhat.com/errata/RHSA-2010-0046.html
DSA-2005 (http://www.debian.org/security/2010/dsa-2005)
Miscellaneous
https://bugzilla.redhat.com/show_bug.cgi?id=526068
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66dca9b8c50b5e59d3bea8b21cee5c6dae6c9c46

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis