National Vulnerability Database (NVD) National Vulnerability Database (CVE-2009-3002)

National Cyber-Alert System

Vulnerability Summary for CVE-2009-3002

Original release date:08/28/2009

Last revised:11/24/2009

Source: US-CERT/NIST

Overview

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.

Impact

CVSS Severity (version 2.0):

CVSS v2 Base Score:4.9 (MEDIUM) (AV:L/AC:L/Au:N/C:C/I:N/A:N) (legend)

Impact Subscore: 6.9

Exploitability Subscore: 3.9

CVSS Version 2 Metrics:

Access Vector: Locally exploitable

Access Complexity: Low

Authentication: Not required to exploit

Impact Type:Allows unauthorized disclosure of information

Vendor Statements (disclaimer)

Official Statement from Red Hat (11/04/2009)

CVE-2009-3002 describes a collection of similar information leaks that affect numerous networking protocols. The Linux kernel as shipped with Red Hat Enterprise Linux 4 and 5 did not enable support for the AppleTalk DDP protocol, and therefore were not affected by issue (1). It was addressed in Red Hat Enterprise Linux 3 and Red Hat Enterprise MRG via: https://rhn.redhat.com/errata/RHSA-2009-1550.html and https://rhn.redhat.com/errata/RHSA-2009-1540.html respectively. The Linux kernel as shipped with Red Hat Enterprise Linux 4, 5 and Red Hat Enterprise MRG did not enable support for IrDA sockets, and therefore were not affected by issue (2). It was addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG did not enable support for the Acorn Econet and AUN protocols, and therefore were not affected by issue (3). The Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG did not enable support for the NET/ROM and ROSE protocols, and therefore were not affected by issues (4) and (5). They were addressed in Red Hat Enterprise Linux 3 via: https://rhn.redhat.com/errata/RHSA-2009-1550.html The raw_getname() leak was introduced in the Linux kernel version 2.6.25-rc1. The Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5, and Red Hat Enterprise MRG therefore were not affected by issue (6).

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: REDHAT

Name: RHSA-2009:1550

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1550.html

External Source: REDHAT

Name: RHSA-2009:1540

Hyperlink:https://rhn.redhat.com/errata/RHSA-2009-1540.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=519305

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=519305

External Source: BID

Name: 36150

Hyperlink:http://www.securityfocus.com/bid/36150

External Source: MLIST

Name: [oss-security] 20090827 Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure

Hyperlink:http://www.openwall.com/lists/oss-security/2009/08/27/2

External Source: MLIST

Name: [oss-security] 20090827 Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure

Hyperlink:http://www.openwall.com/lists/oss-security/2009/08/27/1

External Source: MILW0RM

Name: 9521

Hyperlink:http://www.milw0rm.com/exploits/9521

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7

External Source: SECUNIA

Name: 37351

Hyperlink:http://secunia.com/advisories/37351

External Source: SECUNIA

Name: 36438

Hyperlink:http://secunia.com/advisories/36438

External Source: SUSE

Name: SUSE-SA:2009:056

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html

External Source: SUSE

Name: SUSE-SA:2009:054

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f6b97b29513950bfbf621a83d85b6f86b39ec8db

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f6b97b29513950bfbf621a83d85b6f86b39ec8db

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e84b90ae5eb3c112d1f208964df1d8156a538289

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e84b90ae5eb3c112d1f208964df1d8156a538289

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=80922bbb12a105f858a8f0abb879cb4302d0ecaa

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=80922bbb12a105f858a8f0abb879cb4302d0ecaa

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d392475c873c10c10d6d96b94d092a34ebd4791

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d392475c873c10c10d6d96b94d092a34ebd4791

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=17ac2e9c58b69a1e25460a568eae1b0dc0188c25

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=17ac2e9c58b69a1e25460a568eae1b0dc0188c25

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=09384dfc76e526c3993c09c42e016372dc9dd22c

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=09384dfc76e526c3993c09c42e016372dc9dd22c

Vulnerable software and versions

Configuration 1

* cpe:/o:linux:kernel:2.6.30.4

* cpe:/o:linux:kernel:2.6.30.5

* cpe:/o:linux:kernel:2.6.30.2

* cpe:/o:linux:kernel:2.6.30.3 and previous versions

* cpe:/o:linux:kernel:2.6.30.1

* cpe:/o:linux:kernel:2.6.30

* cpe:/o:linux:kernel:2.6.29.5

* cpe:/o:linux:kernel:2.6.29.6

* cpe:/o:linux:kernel:2.6.29.4

* cpe:/o:linux:kernel:2.6.29.3

* cpe:/o:linux:kernel:2.6.29.2

* cpe:/o:linux:kernel:2.6.29.1

* cpe:/o:linux:kernel:2.6.29

* cpe:/o:linux:kernel:2.6.28.10

* cpe:/o:linux:kernel:2.6.28.9

* cpe:/o:linux:kernel:2.6.28.8

* cpe:/o:linux:kernel:2.6.28.7

* cpe:/o:linux:kernel:2.6.28.6

* cpe:/o:linux:kernel:2.6.28.5

* cpe:/o:linux:kernel:2.6.28.4

* cpe:/o:linux:kernel:2.6.28.3

* cpe:/o:linux:kernel:2.6.28.2

* cpe:/o:linux:kernel:2.6.28.1

* cpe:/o:linux:kernel:2.6.28

* cpe:/o:linux:kernel:2.6.27.31

* cpe:/o:linux:kernel:2.6.27.30

* cpe:/o:linux:kernel:2.6.27.29

* cpe:/o:linux:kernel:2.6.27.28

* cpe:/o:linux:kernel:2.6.27.27

* cpe:/o:linux:kernel:2.6.27.26

* cpe:/o:linux:kernel:2.6.27.25

* cpe:/o:linux:kernel:2.6.27.24

* cpe:/o:linux:kernel:2.6.27.23

* cpe:/o:linux:kernel:2.6.27.22

* cpe:/o:linux:kernel:2.6.27.21

* cpe:/o:linux:kernel:2.6.27.20

* cpe:/o:linux:kernel:2.6.27.19

* cpe:/o:linux:kernel:2.6.27.18

* cpe:/o:linux:kernel:2.6.27.17

* cpe:/o:linux:kernel:2.6.27.16

* cpe:/o:linux:kernel:2.6.27.15

* cpe:/o:linux:kernel:2.6.27.14

* cpe:/o:linux:kernel:2.6.27.13

* cpe:/o:linux:kernel:2.6.27.12

* cpe:/o:linux:kernel:2.6.27.11

* cpe:/o:linux:kernel:2.6.27.10

* cpe:/o:linux:kernel:2.6.27.9

* cpe:/o:linux:kernel:2.6.27.8

* cpe:/o:linux:kernel:2.6.27.7

* cpe:/o:linux:kernel:2.6.27.6

* cpe:/o:linux:kernel:2.6.27.5

* cpe:/o:linux:kernel:2.6.27.4

* cpe:/o:linux:kernel:2.6.27.3

* cpe:/o:linux:kernel:2.6.27.2

* cpe:/o:linux:kernel:2.6.27.1

* cpe:/o:linux:kernel:2.6.27

* cpe:/o:linux:kernel:2.6.26.8

* cpe:/o:linux:kernel:2.6.26.7

* cpe:/o:linux:kernel:2.6.26.6

* cpe:/o:linux:kernel:2.6.26.5

* cpe:/o:linux:kernel:2.6.26.4

* cpe:/o:linux:kernel:2.6.26.3

* cpe:/o:linux:kernel:2.6.26.2

* cpe:/o:linux:kernel:2.6.26.1

* cpe:/o:linux:kernel:2.6.26

* cpe:/o:linux:kernel:2.6.25.20

* cpe:/o:linux:kernel:2.6.25.19

* cpe:/o:linux:kernel:2.6.25.18

* cpe:/o:linux:kernel:2.6.25.17

* cpe:/o:linux:kernel:2.6.25.16

* cpe:/o:linux:kernel:2.6.25.15

* cpe:/o:linux:kernel:2.6.25.14

* cpe:/o:linux:kernel:2.6.25.13

* cpe:/o:linux:kernel:2.6.25.12

* cpe:/o:linux:kernel:2.6.25.11

* cpe:/o:linux:kernel:2.6.25.10

* cpe:/o:linux:kernel:2.6.25.9

* cpe:/o:linux:kernel:2.6.25.8

* cpe:/o:linux:kernel:2.6.25.7

* cpe:/o:linux:kernel:2.6.25.6

* cpe:/o:linux:kernel:2.6.25.5

* cpe:/o:linux:kernel:2.6.25.4

* cpe:/o:linux:kernel:2.6.25.3

* cpe:/o:linux:kernel:2.6.25.2

* cpe:/o:linux:kernel:2.6.25.1

* cpe:/o:linux:kernel:2.6.25

* cpe:/o:linux:kernel:2.6.24.7

* cpe:/o:linux:kernel:2.6.24.6

* cpe:/o:linux:kernel:2.6.24.5

* cpe:/o:linux:kernel:2.6.24.4

* cpe:/o:linux:kernel:2.6.24.3

* cpe:/o:linux:kernel:2.6.24.2

* cpe:/o:linux:kernel:2.6.24.1

* cpe:/o:linux:kernel:2.6.24

* cpe:/o:linux:kernel:2.6.23.17

* cpe:/o:linux:kernel:2.6.23.16

* cpe:/o:linux:kernel:2.6.23.15

* cpe:/o:linux:kernel:2.6.23.14

* cpe:/o:linux:kernel:2.6.23.13

* cpe:/o:linux:kernel:2.6.23.12

* cpe:/o:linux:kernel:2.6.23.11

* cpe:/o:linux:kernel:2.6.23.10

* cpe:/o:linux:kernel:2.6.23.9

* cpe:/o:linux:kernel:2.6.23.8

* cpe:/o:linux:kernel:2.6.23.7

* cpe:/o:linux:kernel:2.6.23.6

* cpe:/o:linux:kernel:2.6.23.5

* cpe:/o:linux:kernel:2.6.23.4

* cpe:/o:linux:kernel:2.6.23.3

* cpe:/o:linux:kernel:2.6.23.2

* cpe:/o:linux:kernel:2.6.23.1

* cpe:/o:linux:kernel:2.6.23

* cpe:/o:linux:kernel:2.6.22.19

* cpe:/o:linux:kernel:2.6.22.18

* cpe:/o:linux:kernel:2.6.22.17

* cpe:/o:linux:kernel:2.6.22.16

* cpe:/o:linux:kernel:2.6.22.15

* cpe:/o:linux:kernel:2.6.22.14

* cpe:/o:linux:kernel:2.6.22.13

* cpe:/o:linux:kernel:2.6.22.12

* cpe:/o:linux:kernel:2.6.22.11

* cpe:/o:linux:kernel:2.6.22.10

* cpe:/o:linux:kernel:2.6.22.9

* cpe:/o:linux:kernel:2.6.22.8

* cpe:/o:linux:kernel:2.6.22.7

* cpe:/o:linux:kernel:2.6.22.6

* cpe:/o:linux:kernel:2.6.22.5

* cpe:/o:linux:kernel:2.6.22.4

* cpe:/o:linux:kernel:2.6.22.3

* cpe:/o:linux:kernel:2.6.22.2

* cpe:/o:linux:kernel:2.6.22.1

* cpe:/o:linux:kernel:2.6.22

* cpe:/o:linux:kernel:2.6.21.7

* cpe:/o:linux:kernel:2.6.21.6

* cpe:/o:linux:kernel:2.6.21.5

* cpe:/o:linux:kernel:2.6.21.4

* cpe:/o:linux:kernel:2.6.21.3

* cpe:/o:linux:kernel:2.6.21.2

* cpe:/o:linux:kernel:2.6.21.1

* cpe:/o:linux:kernel:2.6.21

* cpe:/o:linux:kernel:2.6.20.21

* cpe:/o:linux:kernel:2.6.20.20

* cpe:/o:linux:kernel:2.6.20.19

* cpe:/o:linux:kernel:2.6.20.18

* cpe:/o:linux:kernel:2.6.20.17

* cpe:/o:linux:kernel:2.6.20.16

* cpe:/o:linux:kernel:2.6.20.15

* cpe:/o:linux:kernel:2.6.20.14

* cpe:/o:linux:kernel:2.6.20.13

* cpe:/o:linux:kernel:2.6.20.12

* cpe:/o:linux:kernel:2.6.20.11

* cpe:/o:linux:kernel:2.6.20.10

* cpe:/o:linux:kernel:2.6.20.9

* cpe:/o:linux:kernel:2.6.20.8

* cpe:/o:linux:kernel:2.6.20.7

* cpe:/o:linux:kernel:2.6.20.6

* cpe:/o:linux:kernel:2.6.20.5

* cpe:/o:linux:kernel:2.6.20.4

* cpe:/o:linux:kernel:2.6.20.3

* cpe:/o:linux:kernel:2.6.20.2

* cpe:/o:linux:kernel:2.6.20.1

* cpe:/o:linux:kernel:2.6.20

* cpe:/o:linux:kernel:2.6.19.7

* cpe:/o:linux:kernel:2.6.19.6

* cpe:/o:linux:kernel:2.6.19.5

* cpe:/o:linux:kernel:2.6.19.4

* cpe:/o:linux:kernel:2.6.19.3

* cpe:/o:linux:kernel:2.6.19.2

* cpe:/o:linux:kernel:2.6.19.1

* cpe:/o:linux:kernel:2.6.19

* cpe:/o:linux:kernel:2.6.18.8

* cpe:/o:linux:kernel:2.6.18.7

* cpe:/o:linux:kernel:2.6.18.6

* cpe:/o:linux:kernel:2.6.18.5

* cpe:/o:linux:kernel:2.6.18.4

* cpe:/o:linux:kernel:2.6.18.3

* cpe:/o:linux:kernel:2.6.18.2

* cpe:/o:linux:kernel:2.6.18.1

* cpe:/o:linux:kernel:2.6.18

* cpe:/o:linux:kernel:2.6.17.14

* cpe:/o:linux:kernel:2.6.17.13

* cpe:/o:linux:kernel:2.6.17.12

* cpe:/o:linux:kernel:2.6.17.11

* cpe:/o:linux:kernel:2.6.17.10

* cpe:/o:linux:kernel:2.6.17.9

* cpe:/o:linux:kernel:2.6.17.8

* cpe:/o:linux:kernel:2.6.17.7

* cpe:/o:linux:kernel:2.6.17.6

* cpe:/o:linux:kernel:2.6.17.5

* cpe:/o:linux:kernel:2.6.17.4

* cpe:/o:linux:kernel:2.6.17.3

* cpe:/o:linux:kernel:2.6.17.2

* cpe:/o:linux:kernel:2.6.17.1

* cpe:/o:linux:kernel:2.6.17

* cpe:/o:linux:kernel:2.6.16.62

* cpe:/o:linux:kernel:2.6.16.61

* cpe:/o:linux:kernel:2.6.16.60

* cpe:/o:linux:kernel:2.6.16.59

* cpe:/o:linux:kernel:2.6.16.58

* cpe:/o:linux:kernel:2.6.16.57

* cpe:/o:linux:kernel:2.6.16.56

* cpe:/o:linux:kernel:2.6.16.55

* cpe:/o:linux:kernel:2.6.16.54

* cpe:/o:linux:kernel:2.6.16.53

* cpe:/o:linux:kernel:2.6.16.52

* cpe:/o:linux:kernel:2.6.16.51

* cpe:/o:linux:kernel:2.6.16.50

* cpe:/o:linux:kernel:2.6.16.49

* cpe:/o:linux:kernel:2.6.16.48

* cpe:/o:linux:kernel:2.6.16.47

* cpe:/o:linux:kernel:2.6.16.46

* cpe:/o:linux:kernel:2.6.16.45

* cpe:/o:linux:kernel:2.6.16.44

* cpe:/o:linux:kernel:2.6.16.43

* cpe:/o:linux:kernel:2.6.16.42

* cpe:/o:linux:kernel:2.6.16.41

* cpe:/o:linux:kernel:2.6.16.40

* cpe:/o:linux:kernel:2.6.16.39

* cpe:/o:linux:kernel:2.6.16.38

* cpe:/o:linux:kernel:2.6.16.37

* cpe:/o:linux:kernel:2.6.16.36

* cpe:/o:linux:kernel:2.6.16.35

* cpe:/o:linux:kernel:2.6.16.34

* cpe:/o:linux:kernel:2.6.16.33

* cpe:/o:linux:kernel:2.6.16.32

* cpe:/o:linux:kernel:2.6.16.31

* cpe:/o:linux:kernel:2.6.16.30

* cpe:/o:linux:kernel:2.6.16.29

* cpe:/o:linux:kernel:2.6.16.28

* cpe:/o:linux:kernel:2.6.16.27

* cpe:/o:linux:kernel:2.6.16.26

* cpe:/o:linux:kernel:2.6.16.25

* cpe:/o:linux:kernel:2.6.16.24

* cpe:/o:linux:kernel:2.6.16.23

* cpe:/o:linux:kernel:2.6.16.22

* cpe:/o:linux:kernel:2.6.16.21

* cpe:/o:linux:kernel:2.6.16.20

* cpe:/o:linux:kernel:2.6.16.19

* cpe:/o:linux:kernel:2.6.16.18

* cpe:/o:linux:kernel:2.6.16.17

* cpe:/o:linux:kernel:2.6.16.16

* cpe:/o:linux:kernel:2.6.16.15

* cpe:/o:linux:kernel:2.6.16.14

* cpe:/o:linux:kernel:2.6.16.13

* cpe:/o:linux:kernel:2.6.16.12

* cpe:/o:linux:kernel:2.6.16.11

* cpe:/o:linux:kernel:2.6.16.10

* cpe:/o:linux:kernel:2.6.16.9

* cpe:/o:linux:kernel:2.6.16.8

* cpe:/o:linux:kernel:2.6.16.7

* cpe:/o:linux:kernel:2.6.16.6

* cpe:/o:linux:kernel:2.6.16.5

* cpe:/o:linux:kernel:2.6.16.4

* cpe:/o:linux:kernel:2.6.16.3

* cpe:/o:linux:kernel:2.6.16.2

* cpe:/o:linux:kernel:2.6.16.1

* cpe:/o:linux:kernel:2.6.16

* cpe:/o:linux:kernel:2.6.15.7

* cpe:/o:linux:kernel:2.6.15.6

* cpe:/o:linux:kernel:2.6.15.5

* cpe:/o:linux:kernel:2.6.15

* cpe:/o:linux:kernel:2.6.15.3

* cpe:/o:linux:kernel:2.6.15.4

* cpe:/o:linux:kernel:2.6.15.1

* cpe:/o:linux:kernel:2.6.15.2

* cpe:/o:linux:kernel:2.6.14.7

* cpe:/o:linux:kernel:2.6.14.5

* cpe:/o:linux:kernel:2.6.14.6

* cpe:/o:linux:kernel:2.6.14

* cpe:/o:linux:kernel:2.6.14.3

* cpe:/o:linux:kernel:2.6.14.4

* cpe:/o:linux:kernel:2.6.14.1

* cpe:/o:linux:kernel:2.6.14.2

* cpe:/o:linux:kernel:2.6.13.5

* cpe:/o:linux:kernel:2.6.13.3

* cpe:/o:linux:kernel:2.6.13.4

* cpe:/o:linux:kernel:2.6.13

* cpe:/o:linux:kernel:2.6.13.2

* cpe:/o:linux:kernel:2.6.13.1

* cpe:/o:linux:kernel:2.6.12.3

* cpe:/o:linux:kernel:2.6.12.2

* cpe:/o:linux:kernel:2.6.12.5

* cpe:/o:linux:kernel:2.6.12.4

* cpe:/o:linux:kernel:2.6.12.6

* cpe:/o:linux:kernel:2.6.12.1

* cpe:/o:linux:kernel:2.6.12

* cpe:/o:linux:kernel:2.6.11.8

* cpe:/o:linux:kernel:2.6.11.7

* cpe:/o:linux:kernel:2.6.11.10

* cpe:/o:linux:kernel:2.6.11.9

* cpe:/o:linux:kernel:2.6.11.12

* cpe:/o:linux:kernel:2.6.11.11

* cpe:/o:linux:kernel:2.6.11

* cpe:/o:linux:kernel:2.6.11.1

* cpe:/o:linux:kernel:2.6.11.2

* cpe:/o:linux:kernel:2.6.11.3

* cpe:/o:linux:kernel:2.6.11.4

* cpe:/o:linux:kernel:2.6.11.5

* cpe:/o:linux:kernel:2.6.11.6

* cpe:/o:linux:kernel:2.6.10

* cpe:/o:linux:kernel:2.6.9

* cpe:/o:linux:kernel:2.6.8.1

* cpe:/o:linux:kernel:2.6.8

* cpe:/o:linux:kernel:2.6.7

* cpe:/o:linux:kernel:2.6.6

* cpe:/o:linux:kernel:2.6.5

* cpe:/o:linux:kernel:2.6.4

* cpe:/o:linux:kernel:2.6.3

* cpe:/o:linux:kernel:2.6.2

* cpe:/o:linux:kernel:2.6.1

* cpe:/o:linux:kernel:2.6.0

* cpe:/o:linux:kernel:2.6.31:rc1

* cpe:/o:linux:kernel:2.6.31:rc2

* cpe:/o:linux:kernel:2.6.31:rc3

* cpe:/o:linux:kernel:2.6.31:rc6 and previous versions

* Denotes Vulnerable Software

Technical Details

Vulnerability Type (View All)

Information Leak / Disclosure (CWE-200)

CVE Standard Vulnerability Entry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3002