Driverse May Let Local Users Invoke ptrace() to Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1015252
|
|
SecurityTracker URL: http://securitytracker.com/id?1015252
|
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Nov 22 2005
|
Impact: User access via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 0.56b
|
Description: A vulnerability was reported in Driverse. A local user may be able to gain elevated privileges.
The software allows a local user to invoke ptrace to gain potentially elevated privileges.
Some other unspecified security vulnerabilites exist.
|
Impact: A local user may be able to gain elevated privileges.
|
Solution: The vendor has issued a fixed version (0.56b), available at:
http://lightless.org/files/driverse.tar.gz
|
Vendor URL: lightless.org/other (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 22 Nov 2005 08:16:37 -0500
Subject: Driverse 0.56b security fix
|
http://freshmeat.net/projects/driverse/?branch_id=61426&release_id=212356
> A ptrace exploit and some other potential security problems were fixed.
|
|
