Bug#309429: kernel-source-2.6.8: Local privilege escalation in pktcdvd und raw ioctl handling

2005-05-19 Thread Horms
tag 309429 +pending thanks On Tue, May 17, 2005 at 09:06:16AM +0200, Moritz Muehlenhoff wrote: Package: kernel-source-2.6.8 Severity: grave Justification: user security hole Two new local privilege escalations have been found in the 2.6 kernels; input to the pktcdvd and raw ioctls is

Bug#309429: kernel-source-2.6.8: Local privilege escalation in pktcdvd und raw ioctl handling

2005-05-18 Thread Horms
On Tue, May 17, 2005 at 09:06:16AM +0200, Moritz Muehlenhoff wrote: Package: kernel-source-2.6.8 Severity: grave Justification: user security hole Two new local privilege escalations have been found in the 2.6 kernels; input to the pktcdvd and raw ioctls is passed unchecked. Both issues

Bug#309429: kernel-source-2.6.8: Local privilege escalation in pktcdvd und raw ioctl handling

2005-05-17 Thread Moritz Muehlenhoff
Package: kernel-source-2.6.8 Severity: grave Justification: user security hole Two new local privilege escalations have been found in the 2.6 kernels; input to the pktcdvd and raw ioctls is passed unchecked. Both issues have been fixed in 2.6.11.10. 2.4 does not seem to be affected. At least one