Attacker Value
Unknown
CVE-2009-3939
CVE-2009-3939
(Last updated January 26, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
7.1 High
Impact Score:
5.2
Exploitability Score:
1.8
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- avaya,
- canonical,
- debian,
- linux,
- opensuse,
- redhat,
- suse
Products
- aura application enablement services 5.2,
- aura application enablement services 5.2.1,
- aura communication manager 5.2,
- aura session manager 1.1,
- aura session manager 5.2,
- aura sip enablement services 5.2,
- aura system manager 5.2,
- aura system manager 6.0,
- aura system platform 1.1,
- debian linux 5.0,
- enterprise linux desktop 5.0,
- enterprise linux eus 5.4,
- enterprise linux server 5.0,
- enterprise linux workstation 5.0,
- linux enterprise desktop 10,
- linux enterprise desktop 11,
- linux enterprise server 10,
- linux enterprise server 11,
- linux kernel,
- opensuse 11.0,
- opensuse 11.1,
- opensuse 11.2,
- ubuntu linux 6.06,
- ubuntu linux 8.04,
- ubuntu linux 8.10,
- ubuntu linux 9.04,
- ubuntu linux 9.10,
- virtualization 5,
- voice portal 5.0
References
Advisory
Miscellaneous
