National Cyber Awareness System

Vulnerability Summary for CVE-2007-4308

Overview

The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2008-0637

Hyperlink:http://www.vupen.com/english/advisories/2008/0637

External Source: VUPEN

Name: ADV-2007-2786

Hyperlink:http://www.vupen.com/english/advisories/2007/2786

External Source: BID

Name: 25216

Hyperlink:http://www.securityfocus.com/bid/25216

External Source: REDHAT

Name: RHSA-2008:0787

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0787.html

External Source: SECUNIA

Name: 33280

Hyperlink:http://secunia.com/advisories/33280

External Source: SECUNIA

Name: 26322

Type: Advisory

Hyperlink:http://secunia.com/advisories/26322

External Source: OVAL

Name: oval:org.mitre.oval:def:8872

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8872

External Source: CONFIRM

Name: http://lkml.org/lkml/2007/7/23/195

Hyperlink:http://lkml.org/lkml/2007/7/23/195

External Source: CONFIRM

Name: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2

Hyperlink:http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc2

External Source: UBUNTU

Name: USN-510-1

Hyperlink:http://www.ubuntu.com/usn/usn-510-1

External Source: UBUNTU

Name: USN-509-1

Hyperlink:http://www.ubuntu.com/usn/usn-509-1

External Source: UBUNTU

Name: USN-508-1

Hyperlink:http://www.ubuntu.com/usn/usn-508-1

External Source: BUGTRAQ

Name: 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/488457/100/0/threaded

External Source: REDHAT

Name: RHSA-2007:1049

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1049.html

External Source: REDHAT

Name: RHSA-2007:0940

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0940.html

External Source: REDHAT

Name: RHSA-2007:0939

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0939.html

External Source: MANDRIVA

Name: MDKSA-2007:196

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

External Source: MANDRIVA

Name: MDKSA-2007:195

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:195

External Source: DEBIAN

Name: DSA-1504

Hyperlink:http://www.debian.org/security/2008/dsa-1504

External Source: DEBIAN

Name: DSA-1503

Hyperlink:http://www.debian.org/security/2008/dsa-1503

External Source: DEBIAN

Name: DSA-1363

Hyperlink:http://www.debian.org/security/2007/dsa-1363

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm

External Source: SECTRACK

Name: 1019470

Hyperlink:http://securitytracker.com/id?1019470

External Source: SECUNIA

Name: 29570

Hyperlink:http://secunia.com/advisories/29570

External Source: SECUNIA

Name: 29058

Hyperlink:http://secunia.com/advisories/29058

External Source: SECUNIA

Name: 29032

Hyperlink:http://secunia.com/advisories/29032

External Source: SECUNIA

Name: 28806

Hyperlink:http://secunia.com/advisories/28806

External Source: SECUNIA

Name: 27913

Hyperlink:http://secunia.com/advisories/27913

External Source: SECUNIA

Name: 27912

Hyperlink:http://secunia.com/advisories/27912

External Source: SECUNIA

Name: 27747

Hyperlink:http://secunia.com/advisories/27747

External Source: SECUNIA

Name: 27436

Hyperlink:http://secunia.com/advisories/27436

External Source: SECUNIA

Name: 27322

Hyperlink:http://secunia.com/advisories/27322

External Source: SECUNIA

Name: 27212

Hyperlink:http://secunia.com/advisories/27212

External Source: SECUNIA

Name: 26651

Hyperlink:http://secunia.com/advisories/26651

External Source: SECUNIA

Name: 26647

Hyperlink:http://secunia.com/advisories/26647

External Source: SECUNIA

Name: 26643

Hyperlink:http://secunia.com/advisories/26643

External Source: MLIST

Name: [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates

Hyperlink:http://lists.vmware.com/pipermail/security-announce/2008/000005.html

External Source: SUSE

Name: SUSE-SA:2008:017

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html

External Source: SUSE

Name: SUSE-SA:2008:006

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

External Source: SUSE

Name: SUSE-SA:2007:064

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html

References to Check Content

Identifier:oval:org.mitre.oval:def:8872

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:8872