Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2010-2071

Overview

Vulnerability Score 4.6 4.6
CVE Id CVE-2010-2071
Last Modified 19 Mar 2012 12:00:00
Published 16 Jun 2010 04:30:02
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-2010-2071

Summary

The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs in the Linux kernel 2.6.34 and earlier does not check file ownership before setting an ACL, which allows local users to bypass file permissions by setting arbitrary ACLs, as demonstrated using setfacl.

Vulnerable Systems

Operating System

  • Linux Kernel 2.6.0

  • Linux Kernel 2.6.1

  • Linux Kernel 2.6.10

  • Linux Kernel 2.6.11

  • Linux Kernel 2.6.11.1

  • Linux Kernel 2.6.11.10

  • Linux Kernel 2.6.11.11

  • Linux Kernel 2.6.11.12

  • Linux Kernel 2.6.11.2

  • Linux Kernel 2.6.11.3

  • Linux Kernel 2.6.11.4

  • Linux Kernel 2.6.11.5

  • Linux Kernel 2.6.11.6

  • Linux Kernel 2.6.11.7

  • Linux Kernel 2.6.11.8

  • Linux Kernel 2.6.11.9

  • Linux Kernel 2.6.12

  • Linux Kernel 2.6.12.1

  • Linux Kernel 2.6.12.2

  • Linux Kernel 2.6.12.3

  • Linux Kernel 2.6.12.4

  • Linux Kernel 2.6.12.5

  • Linux Kernel 2.6.12.6

  • Linux Kernel 2.6.13

  • Linux Kernel 2.6.13.1

  • Linux Kernel 2.6.13.2

  • Linux Kernel 2.6.13.3

  • Linux Kernel 2.6.13.4

  • Linux Kernel 2.6.13.5

  • Linux Kernel 2.6.14

  • Linux Kernel 2.6.14.1

  • Linux Kernel 2.6.14.2

  • Linux Kernel 2.6.14.3

  • Linux Kernel 2.6.14.4

  • Linux Kernel 2.6.14.5

  • Linux Kernel 2.6.14.6

  • Linux Kernel 2.6.14.7

  • Linux Kernel 2.6.15

  • Linux Kernel 2.6.15.1

  • Linux Kernel 2.6.15.2

  • Linux Kernel 2.6.15.3

  • Linux Kernel 2.6.15.4

  • Linux Kernel 2.6.15.5

  • Linux Kernel 2.6.15.6

  • Linux Kernel 2.6.15.7

  • Linux Kernel 2.6.16

  • Linux Kernel 2.6.16.1

  • Linux Kernel 2.6.16.10

  • Linux Kernel 2.6.16.11

  • Linux Kernel 2.6.16.12

  • Linux Kernel 2.6.16.13

  • Linux Kernel 2.6.16.14

  • Linux Kernel 2.6.16.15

  • Linux Kernel 2.6.16.16

  • Linux Kernel 2.6.16.17

  • Linux Kernel 2.6.16.18

  • Linux Kernel 2.6.16.19

  • Linux Kernel 2.6.16.2

  • Linux Kernel 2.6.16.20

  • Linux Kernel 2.6.16.21

  • Linux Kernel 2.6.16.22

  • Linux Kernel 2.6.16.23

  • Linux Kernel 2.6.16.24

  • Linux Kernel 2.6.16.25

  • Linux Kernel 2.6.16.26

  • Linux Kernel 2.6.16.27

  • Linux Kernel 2.6.16.28

  • Linux Kernel 2.6.16.29

  • Linux Kernel 2.6.16.3

  • Linux Kernel 2.6.16.30

  • Linux Kernel 2.6.16.31

  • Linux Kernel 2.6.16.32

  • Linux Kernel 2.6.16.33

  • Linux Kernel 2.6.16.34

  • Linux Kernel 2.6.16.35

  • Linux Kernel 2.6.16.36

  • Linux Kernel 2.6.16.37

  • Linux Kernel 2.6.16.38

  • Linux Kernel 2.6.16.39

  • Linux Kernel 2.6.16.4

  • Linux Kernel 2.6.16.40

  • Linux Kernel 2.6.16.41

  • Linux Kernel 2.6.16.42

  • Linux Kernel 2.6.16.43

  • Linux Kernel 2.6.16.44

  • Linux Kernel 2.6.16.45

  • Linux Kernel 2.6.16.46

  • Linux Kernel 2.6.16.47

  • Linux Kernel 2.6.16.48

  • Linux Kernel 2.6.16.49

  • Linux Kernel 2.6.16.5

  • Linux Kernel 2.6.16.50

  • Linux Kernel 2.6.16.51

  • Linux Kernel 2.6.16.52

  • Linux Kernel 2.6.16.53

  • Linux Kernel 2.6.16.54

  • Linux Kernel 2.6.16.55

  • Linux Kernel 2.6.16.56

  • Linux Kernel 2.6.16.57

  • Linux Kernel 2.6.16.58

  • Linux Kernel 2.6.16.59

  • Linux Kernel 2.6.16.6

  • Linux Kernel 2.6.16.60

  • Linux Kernel 2.6.16.61

  • Linux Kernel 2.6.16.62

  • Linux Kernel 2.6.16.7

  • Linux Kernel 2.6.16.8

  • Linux Kernel 2.6.16.9

  • Linux Kernel 2.6.17

  • Linux Kernel 2.6.17.1

  • Linux Kernel 2.6.17.10

  • Linux Kernel 2.6.17.11

  • Linux Kernel 2.6.17.12

  • Linux Kernel 2.6.17.13

  • Linux Kernel 2.6.17.14

  • Linux Kernel 2.6.17.2

  • Linux Kernel 2.6.17.3

  • Linux Kernel 2.6.17.4

  • Linux Kernel 2.6.17.5

  • Linux Kernel 2.6.17.6

  • Linux Kernel 2.6.17.7

  • Linux Kernel 2.6.17.8

  • Linux Kernel 2.6.17.9

  • Linux Kernel 2.6.18

  • Linux Kernel 2.6.18.1

  • Linux Kernel 2.6.18.2

  • Linux Kernel 2.6.18.3

  • Linux Kernel 2.6.18.4

  • Linux Kernel 2.6.18.5

  • Linux Kernel 2.6.18.6

  • Linux Kernel 2.6.18.7

  • Linux Kernel 2.6.18.8

  • Linux Kernel 2.6.19

  • Linux Kernel 2.6.19.1

  • Linux Kernel 2.6.19.2

  • Linux Kernel 2.6.19.3

  • Linux Kernel 2.6.19.4

  • Linux Kernel 2.6.19.5

  • Linux Kernel 2.6.19.6

  • Linux Kernel 2.6.19.7

  • Linux Kernel 2.6.2

  • Linux Kernel 2.6.20

  • Linux Kernel 2.6.20.1

  • Linux Kernel 2.6.20.10

  • Linux Kernel 2.6.20.11

  • Linux Kernel 2.6.20.12

  • Linux Kernel 2.6.20.13

  • Linux Kernel 2.6.20.14

  • Linux Kernel 2.6.20.15

  • Linux Kernel 2.6.20.16

  • Linux Kernel 2.6.20.17

  • Linux Kernel 2.6.20.18

  • Linux Kernel 2.6.20.19

  • Linux Kernel 2.6.20.2

  • Linux Kernel 2.6.20.20

  • Linux Kernel 2.6.20.21

  • Linux Kernel 2.6.20.3

  • Linux Kernel 2.6.20.4

  • Linux Kernel 2.6.20.5

  • Linux Kernel 2.6.20.6

  • Linux Kernel 2.6.20.7

  • Linux Kernel 2.6.20.8

  • Linux Kernel 2.6.20.9

  • Linux Kernel 2.6.21

  • Linux Kernel 2.6.21.1

  • Linux Kernel 2.6.21.2

  • Linux Kernel 2.6.21.3

  • Linux Kernel 2.6.21.4

  • Linux Kernel 2.6.21.5

  • Linux Kernel 2.6.21.6

  • Linux Kernel 2.6.21.7

  • Linux Kernel 2.6.22

  • Linux Kernel 2.6.22.1

  • Linux Kernel 2.6.22.10

  • Linux Kernel 2.6.22.11

  • Linux Kernel 2.6.22.12

  • Linux Kernel 2.6.22.13

  • Linux Kernel 2.6.22.14

  • Linux Kernel 2.6.22.15

  • Linux Kernel 2.6.22.16

  • Linux Kernel 2.6.22.17

  • Linux Kernel 2.6.22.18

  • Linux Kernel 2.6.22.19

  • Linux Kernel 2.6.22.2

  • Linux Kernel 2.6.22.20

  • Linux Kernel 2.6.22.21

  • Linux Kernel 2.6.22.22

  • Linux Kernel 2.6.22.3

  • Linux Kernel 2.6.22.4

  • Linux Kernel 2.6.22.5

  • Linux Kernel 2.6.22.6

  • Linux Kernel 2.6.22.7

  • Linux Kernel 2.6.22.8

  • Linux Kernel 2.6.22.9

  • Linux Kernel 2.6.23

  • Linux Kernel 2.6.23.1

  • Linux Kernel 2.6.23.10

  • Linux Kernel 2.6.23.11

  • Linux Kernel 2.6.23.12

  • Linux Kernel 2.6.23.13

  • Linux Kernel 2.6.23.14

  • Linux Kernel 2.6.23.15

  • Linux Kernel 2.6.23.16

  • Linux Kernel 2.6.23.17

  • Linux Kernel 2.6.23.2

  • Linux Kernel 2.6.23.3

  • Linux Kernel 2.6.23.4

  • Linux Kernel 2.6.23.5

  • Linux Kernel 2.6.23.6

  • Linux Kernel 2.6.23.7

  • Linux Kernel 2.6.23.8

  • Linux Kernel 2.6.23.9

  • Linux Kernel 2.6.24

  • Linux Kernel 2.6.24.1

  • Linux Kernel 2.6.24.2

  • Linux Kernel 2.6.24.3

  • Linux Kernel 2.6.24.4

  • Linux Kernel 2.6.24.5

  • Linux Kernel 2.6.24.6

  • Linux Kernel 2.6.24.7

  • Linux Kernel 2.6.25

  • Linux Kernel 2.6.25.1

  • Linux Kernel 2.6.25.10

  • Linux Kernel 2.6.25.11

  • Linux Kernel 2.6.25.12

  • Linux Kernel 2.6.25.13

  • Linux Kernel 2.6.25.14

  • Linux Kernel 2.6.25.15

  • Linux Kernel 2.6.25.16

  • Linux Kernel 2.6.25.17

  • Linux Kernel 2.6.25.18

  • Linux Kernel 2.6.25.19

  • Linux Kernel 2.6.25.2

  • Linux Kernel 2.6.25.20

  • Linux Kernel 2.6.25.3

  • Linux Kernel 2.6.25.4

  • Linux Kernel 2.6.25.5

  • Linux Kernel 2.6.25.6

  • Linux Kernel 2.6.25.7

  • Linux Kernel 2.6.25.8

  • Linux Kernel 2.6.25.9

  • Linux Kernel 2.6.26

  • Linux Kernel 2.6.26.1

  • Linux Kernel 2.6.26.2

  • Linux Kernel 2.6.26.3

  • Linux Kernel 2.6.26.4

  • Linux Kernel 2.6.26.5

  • Linux Kernel 2.6.26.6

  • Linux Kernel 2.6.26.7

  • Linux Kernel 2.6.26.8

  • Linux Kernel 2.6.27

  • Linux Kernel 2.6.27.10

  • Linux Kernel 2.6.27.11

  • Linux Kernel 2.6.27.12

  • Linux Kernel 2.6.27.20

  • Linux Kernel 2.6.27.22

  • Linux Kernel 2.6.27.23

  • Linux Kernel 2.6.27.24

  • Linux Kernel 2.6.27.33

  • Linux Kernel 2.6.27.34

  • Linux Kernel 2.6.27.35

  • Linux Kernel 2.6.27.36

  • Linux Kernel 2.6.27.37

  • Linux Kernel 2.6.27.5

  • Linux Kernel 2.6.27.6

  • Linux Kernel 2.6.27.7

  • Linux Kernel 2.6.27.8

  • Linux Kernel 2.6.27.9

  • Linux Kernel 2.6.28

  • Linux Kernel 2.6.28.1

  • Linux Kernel 2.6.28.10

  • Linux Kernel 2.6.28.2

  • Linux Kernel 2.6.28.3

  • Linux Kernel 2.6.28.4

  • Linux Kernel 2.6.28.5

  • Linux Kernel 2.6.28.6

  • Linux Kernel 2.6.28.7

  • Linux Kernel 2.6.28.8

  • Linux Kernel 2.6.28.9

  • Linux Kernel 2.6.29

  • Linux Kernel 2.6.29.1

  • Linux Kernel 2.6.29.2

  • Linux Kernel 2.6.29.3

  • Linux Kernel 2.6.29.4

  • Linux Kernel 2.6.29.5

  • Linux Kernel 2.6.29.6

  • Linux Kernel 2.6.3

  • Linux Kernel 2.6.30

  • Linux Kernel 2.6.30.1

  • Linux Kernel 2.6.30.10

  • Linux Kernel 2.6.30.2

  • Linux Kernel 2.6.30.3

  • Linux Kernel 2.6.30.4

  • Linux Kernel 2.6.30.5

  • Linux Kernel 2.6.30.6

  • Linux Kernel 2.6.30.7

  • Linux Kernel 2.6.30.8

  • Linux Kernel 2.6.30.9

  • Linux Kernel 2.6.31

  • Linux Kernel 2.6.31.1

  • Linux Kernel 2.6.31.10

  • Linux Kernel 2.6.31.11

  • Linux Kernel 2.6.31.12

  • Linux Kernel 2.6.31.2

  • Linux Kernel 2.6.31.3

  • Linux Kernel 2.6.31.4

  • Linux Kernel 2.6.31.5

  • Linux Kernel 2.6.31.6

  • Linux Kernel 2.6.31.7

  • Linux Kernel 2.6.31.8

  • Linux Kernel 2.6.31.9

  • Linux Kernel 2.6.32

  • Linux Kernel 2.6.32.1

  • Linux Kernel 2.6.32.10

  • Linux Kernel 2.6.32.2

  • Linux Kernel 2.6.32.3

  • Linux Kernel 2.6.32.4

  • Linux Kernel 2.6.32.5

  • Linux Kernel 2.6.32.6

  • Linux Kernel 2.6.32.7

  • Linux Kernel 2.6.32.8

  • Linux Kernel 2.6.32.9

  • Linux Kernel 2.6.33

  • Linux Kernel 2.6.33.1

  • Linux Kernel 2.6.33.2

  • Linux Kernel 2.6.33.3

  • Linux Kernel 2.6.33.4

  • Linux Kernel 2.6.33.5

  • Linux Kernel 2.6.34

  • Linux Kernel 2.6.4

  • Linux Kernel 2.6.5

  • Linux Kernel 2.6.6

  • Linux Kernel 2.6.7

  • Linux Kernel 2.6.8

  • Linux Kernel 2.6.8.1

  • Linux Kernel 2.6.9


References

MLIST - [linux-kernel] 20100518 [PATCH] btrfs: should add a permission check for setfacl

CONFIRM - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=2f26afba

MLIST - [oss-security] 20100614 Re: CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own

MLIST - [oss-security] 20100611 CVE request - kernel: btrfs: prevent users from setting ACLs on files they do not own


Last Updated: 27 May 2016 11:00:01