Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2009-3556
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files..
CVSSv2.0 Score
- Severity
- Low
- Base Score
- 1.9/10
- Exploit Score
- 3.4/10
- Access Vector
- Local
- Access Complexity
- Medium
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- None
- Availability Impact
- None
- Integrity Impact
- Partial
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:* |
Yes
|
- |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=537177
- https://rhn.redhat.com/errata/RHSA-2010-0046.html
- http://www.openwall.com/lists/oss-security/2010/01/20/2
- https://rhn.redhat.com/errata/RHSA-2010-0095.html
- http://support.avaya.com/css/P8/documents/100073666
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55809
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6