CVE-2008-3525

NameCVE-2008-3525
DescriptionThe sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1653-1, DSA-1655-1
NVD severityhigh (attack range: local)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
fai-kernelssourceetch1.17+etch.22etch3highDSA-1653-1
linux-2.6source(unstable)2.6.26-7high
linux-2.6sourceetch2.6.18.dfsg.1-22etch3highDSA-1653-1
linux-2.6.24source(unstable)2.6.24-6~etchnhalf.6high
linux-2.6.24sourceetch2.6.24-6~etchnhalf.6highDSA-1655-1
user-mode-linuxsourceetch2.6.18-1um-2etch.22etch3highDSA-1653-1

Search for package or bug name: Reporting problems