CVE-2009-3286

Linux kernel 2.6.18 - Insecure File Creation via NFSv4 O_EXCL Create Failure

Title source: llm
STIX 2.1

Description

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an O_EXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the do_open_permission function even when a create fails.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-852-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38794
Various Sources mailing-list x_refsource_mlist
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9757
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7527
Vendor Advisory vendor-advisory x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2009-1548.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38834
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/09/21/2
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=524520
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37105
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0528

Scores

EPSS 0.0047
EPSS Percentile 38.2%

Details

CWE
CWE-264
Status published
Products (1)
linux/linux_kernel 2.6.18
Published Sep 22, 2009
Tracked Since Feb 18, 2026