« Volver al listado

CVE-2008-1940

Estado: ModificadaMedia (4.6)—

The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Grsecurity — Grsecurity Kernel Patch

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-1940",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-04-25T06:05:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/29899",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.grsecurity.org/news.php#grsec21113",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/28889",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1019919",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/1323/references",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41952",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29899",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.grsecurity.org/news.php#grsec21113",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/28889",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1019919",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/1323/references",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41952",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls."
    },
    {
      "lang": "es",
      "value": "la funcionalidad RBAC en grsecurity  anterior a 2.1.11-2.6.24.5 y 2.1.11-2.4.36.2, no refuerza adecuadamente las reglas de user_transition_deny y user_transition_allow para las llamadas  a (1) sys_setfsuid y (2) sys_setfsgid, lo que permite a usuarios locales evitar ciertas restricciones para esas llamadas."
    }
  ],
  "lastModified": "2026-06-16T22:52:47.537",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE274B31-F45B-44AC-A2CF-55CDD75EF8C0"
            },
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C69D79A0-4AE7-4404-A84B-CC9DC94ACB8C"
            },
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4402581B-56B9-42EE-BEB6-471BDAAF98FB"
            },
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.33.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5622EF19-743B-4883-9261-D956AB1A640D"
            },
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.4.34:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3685EC7-3E2F-4180-9B24-F39EE79FA7BF"
            },
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.6.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C64C331-5190-4A97-ADAD-9112A4F2BDDB"
            },
            {
              "criteria": "cpe:2.3:a:grsecurity:grsecurity_kernel_patch:2.6.24.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0A7E755-ABDB-4458-A16E-92C55217DBEC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}