3.3

CVE-2011-1833

Exploit
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.0.44
Linux ≫ Linux Kernel Version 3.0 Update rc1
Linux ≫ Linux Kernel Version 3.0 Update rc2
Linux ≫ Linux Kernel Version 3.0 Update rc3
Linux ≫ Linux Kernel Version 3.0 Update rc4
Linux ≫ Linux Kernel Version 3.0 Update rc5
Linux ≫ Linux Kernel Version 3.0 Update rc6
Linux ≫ Linux Kernel Version 3.0 Update rc7
Linux ≫ Linux Kernel Version 3.0.1
Linux ≫ Linux Kernel Version 3.0.2
Linux ≫ Linux Kernel Version 3.0.3
Linux ≫ Linux Kernel Version 3.0.4
Linux ≫ Linux Kernel Version 3.0.5
Linux ≫ Linux Kernel Version 3.0.6
Linux ≫ Linux Kernel Version 3.0.7
Linux ≫ Linux Kernel Version 3.0.8
Linux ≫ Linux Kernel Version 3.0.9
Linux ≫ Linux Kernel Version 3.0.10
Linux ≫ Linux Kernel Version 3.0.11
Linux ≫ Linux Kernel Version 3.0.12
Linux ≫ Linux Kernel Version 3.0.13
Linux ≫ Linux Kernel Version 3.0.14
Linux ≫ Linux Kernel Version 3.0.15
Linux ≫ Linux Kernel Version 3.0.16
Linux ≫ Linux Kernel Version 3.0.17
Linux ≫ Linux Kernel Version 3.0.18
Linux ≫ Linux Kernel Version 3.0.19
Linux ≫ Linux Kernel Version 3.0.20
Linux ≫ Linux Kernel Version 3.0.21
Linux ≫ Linux Kernel Version 3.0.22
Linux ≫ Linux Kernel Version 3.0.23
Linux ≫ Linux Kernel Version 3.0.24
Linux ≫ Linux Kernel Version 3.0.25
Linux ≫ Linux Kernel Version 3.0.26
Linux ≫ Linux Kernel Version 3.0.27
Linux ≫ Linux Kernel Version 3.0.28
Linux ≫ Linux Kernel Version 3.0.29
Linux ≫ Linux Kernel Version 3.0.30
Linux ≫ Linux Kernel Version 3.0.31
Linux ≫ Linux Kernel Version 3.0.32
Linux ≫ Linux Kernel Version 3.0.33
Linux ≫ Linux Kernel Version 3.0.34
Linux ≫ Linux Kernel Version 3.0.35
Linux ≫ Linux Kernel Version 3.0.36
Linux ≫ Linux Kernel Version 3.0.37
Linux ≫ Linux Kernel Version 3.0.38
Linux ≫ Linux Kernel Version 3.0.39
Linux ≫ Linux Kernel Version 3.0.40
Linux ≫ Linux Kernel Version 3.0.41
Linux ≫ Linux Kernel Version 3.0.42
Linux ≫ Linux Kernel Version 3.0.43
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.274
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 3.4 4.9
AV:L/AC:M/Au:N/C:P/I:P/A:N
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=764355487ea220fdc2faf128d577d7f679b91f97
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html
http://www.ubuntu.com/usn/USN-1188-1
https://bugzilla.redhat.com/show_bug.cgi?id=731172
https://github.com/torvalds/linux/commit/764355487ea220fdc2faf128d577d7f679b91f97
Patch
Exploit