CVE - CVE-2009-1527

CVE-ID
CVE-2009-1527	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Race condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACE_ATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect cred_exec_mutex object.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20090516 rPSA-2009-0084-1 kernel URL:http://www.securityfocus.com/archive/1/503610/100/0/threaded MLIST:[oss-security] 20090504 CVE request: kernel: ptrace_attach: fix the usage of ->cred_exec_mutex URL:http://www.openwall.com/lists/oss-security/2009/05/04/2 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cad81bc2529ab8c62b6fdc83a1c0c7f4a87209eb CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.30-rc4 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0084 BID:34799 URL:http://www.securityfocus.com/bid/34799 OSVDB:54188 URL:http://www.osvdb.org/54188 SECUNIA:34977 URL:http://secunia.com/advisories/34977 SECUNIA:35120 URL:http://secunia.com/advisories/35120 VUPEN:ADV-2009-1236 URL:http://www.vupen.com/english/advisories/2009/1236 XF:linux-kernel-ptraceattach-code-execution(50293) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/50293
Assigning CNA
N/A
Date Entry Created
20090505	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090505)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org