CVE-2011-2495 in Linux Kernel

요약 (영어)

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user s password.

예약하다

2011. 06. 15.

공개

2012. 06. 13.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
60956	Linux Kernel 권한 상승	264	정의되지 않음	공식 수정	CVE-2011-2495