CVE-2011-1020 in Kernel
要約 (英語)
The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
予約する
2011年02月14日
公開
2011年02月28日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 56641 | Linux Kernel proc 特権昇格 | 264 | 概念実証 | 未定義 | CVE-2011-1020 |