First published: Tue Sep 06 2005(Updated: )
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux kernel | =2.6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-2801 has a moderate severity due to its potential impact on default ACLs in ext2 and ext3 file systems.
To fix CVE-2005-2801, you should upgrade the Linux kernel to a version later than 2.6.0 that addresses this vulnerability.
CVE-2005-2801 specifically affects Linux kernel version 2.6.0 running on ext2 and ext3 file systems.
The main consequence of CVE-2005-2801 is that it may prevent the proper application of default Access Control Lists (ACLs).
CVE-2005-2801 is not a concern for current Linux distributions as it has been resolved in later kernel updates.