CVE - CVE-2009-1895

CVE-ID
CVE-2009-1895	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to (1) conduct NULL pointer dereference attacks, (2) bypass the mmap_min_addr protection mechanism, or (3) defeat address space layout randomization (ASLR).
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20090724 rPSA-2009-0111-1 kernel URL:http://www.securityfocus.com/archive/1/archive/1/505254/100/0/threaded BUGTRAQ:20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components URL:http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded BUGTRAQ:20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel URL:http://www.securityfocus.com/archive/1/archive/1/512019/100/0/threaded MISC:http://blog.cr0.org/2009/06/bypassing-linux-null-pointer.html CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f9fabcb58a6d26d6efde842d1703ac7cfa9427b6 CONFIRM:http://patchwork.kernel.org/patch/32598/ CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc3 CONFIRM:https://bugs.launchpad.net/bugs/cve/2009-1895 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0111 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0016.html DEBIAN:DSA-1844 URL:http://www.debian.org/security/2009/dsa-1844 DEBIAN:DSA-1845 URL:http://www.debian.org/security/2009/dsa-1845 FEDORA:FEDORA-2009-8144 URL:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html FEDORA:FEDORA-2009-8264 URL:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html MANDRIVA:MDVSA-2011:051 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 REDHAT:RHSA-2009:1193 URL:http://www.redhat.com/support/errata/RHSA-2009-1193.html REDHAT:RHSA-2009:1438 URL:http://www.redhat.com/support/errata/RHSA-2009-1438.html REDHAT:RHSA-2009:1540 URL:https://rhn.redhat.com/errata/RHSA-2009-1540.html REDHAT:RHSA-2009:1550 URL:https://rhn.redhat.com/errata/RHSA-2009-1550.html UBUNTU:USN-807-1 URL:http://www.ubuntu.com/usn/usn-807-1 BID:35647 URL:http://www.securityfocus.com/bid/35647 OSVDB:55807 URL:http://www.osvdb.org/55807 OVAL:oval:org.mitre.oval:def:11768 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11768 OVAL:oval:org.mitre.oval:def:7826 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7826 OVAL:oval:org.mitre.oval:def:9453 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9453 SECUNIA:35801 URL:http://secunia.com/advisories/35801 SECUNIA:36045 URL:http://secunia.com/advisories/36045 SECUNIA:36051 URL:http://secunia.com/advisories/36051 SECUNIA:36054 URL:http://secunia.com/advisories/36054 SECUNIA:36116 URL:http://secunia.com/advisories/36116 SECUNIA:36131 URL:http://secunia.com/advisories/36131 SECUNIA:36759 URL:http://secunia.com/advisories/36759 SECUNIA:37471 URL:http://secunia.com/advisories/37471 VUPEN:ADV-2009-1866 URL:http://www.vupen.com/english/advisories/2009/1866 VUPEN:ADV-2009-3316 URL:http://www.vupen.com/english/advisories/2009/3316
Assigning CNA
N/A
Date Entry Created
20090602	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090602)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.