CVE-2004-0667: High severity RSBAC RSBAC vulnerability

Published Jul 13, 2004

Updated

Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to syscreat, sysopen, and sysmknod inside jails, which could allow local users to gain elevated privileges.

Affected Software

5 affected components

RSBAC RSBAC=1.2.2

RSBAC RSBAC=1.2.3

Gentoo Linux=1.4

RSBAC Rule Set Based Access Control=1.2.2

RSBAC Rule Set Based Access Control=1.2.3

Remediation

Patch Available

http://www.securityfocus.com/bid/10640

Event History

Jul 13, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0667?

CVE-2004-0667 is considered a high severity vulnerability due to the potential for local users to gain elevated privileges.

How do I fix CVE-2004-0667?

To mitigate CVE-2004-0667, it is recommended to upgrade RSBAC to versions 1.2.4 or later where this vulnerability is addressed.

What systems are affected by CVE-2004-0667?

CVE-2004-0667 affects RSBAC versions 1.2.2 and 1.2.3, along with specific implementations on Gentoo Linux version 1.4.

What actions can local users perform due to CVE-2004-0667?

Due to CVE-2004-0667, local users can invoke sys_creat, sys_open, and sys_mknod calls inside jails, potentially allowing privilege escalation.

Who discovered CVE-2004-0667?

CVE-2004-0667 was reported by security experts observing vulnerabilities in the RSBAC system's access controls.