CVE-2008-1940 The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid call...
MediumCVSS 4.6
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grsecurity kernel patch | = 2.4.33 | No fix listed |
| grsecurity kernel patch | = 2.4.33.2 | No fix listed |
| grsecurity kernel patch | = 2.4.33.3 | No fix listed |
| grsecurity kernel patch | = 2.4.33.4 | No fix listed |
| grsecurity kernel patch | = 2.4.34 | No fix listed |
| grsecurity kernel patch | = 2.6.18 | No fix listed |
| grsecurity kernel patch | = 2.6.24.4 | No fix listed |
References
- 29899 patch third-party-advisory vendor-advisory
- www.grsecurity.org
- 28889 patch vdb-entry
- 1019919 vdb-entry
- ADV-2008-1323 vdb-entry
- grsecurity-rbac-security-bypass(41952) vdb-entry