Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Linux Kernel chown() System Call Group Ownership Alteration Vulnerability

Solution:
Trustix Secure Linux has released advisory TSLSA-2004-0041 to address this, and other issues. Please see the referenced advisory for further information.

SuSE Linux has released advisory SUSE-SA:2004:020 dealing with this issue. Please see the referenced advisory for further information.

Redhat has released advisories FEDORA-2004-205 and FEDORA-2004-206 addressing this issue for Fedora Core 1 and Fedora Core 2. Please see the referenced advisories for further information.

Redhat has released advisory RHSA-2004:360-05 addressing this issue for Redhat Enterprise Linux. Please see the referenced advisory for further information.

Mandrake has released advisory MDKSA-2004:066 dealing with this and other issues. Please see the referenced advisory for more information.

Gentoo has released advisory GLSA 200407-16 dealing with this and other issues. They have advised that users should upgrade to the latest available sources for their system:

# emerge sync

# emerge -pv your-favorite-sources
# emerge your-favorite-sources

# # Follow usual procedure for compiling and installing a kernel.
# # If you use genkernel, run genkernel as you would do normally.

For more information please see the referenced Gentoo advisory.

Conectiva Linux has released advisory CLA-2004:852 along with fixes dealing with this and other issues. Please see the referenced advisory for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com <mailto:vuldb@securityfocus.com>.

Red Hat has released advisory RHSA-2004:327-09 along with fixes to address this issue for Red Hat Enterprise Linux 2.1 for Itanium processors. Please see the referenced advisory for further information.

Conectiva Linux has released an advisory (CLA-2004:869) along with fixes dealing with this issue. Please see the referenced advisory for more information.


RedHat Fedora Core1

Linux kernel 2.4.20

Linux kernel 2.4.21

Linux kernel 2.6.5

Linux kernel 2.6.6







 

Privacy Statement
Copyright 2008, SecurityFocus