CVE-2010-0007: Low severity linux kernel vulnerability
Description of problem: commit dce766af541f6605fa9889892c0280bab31c66ab Author: Florian Westphal <fwestphal> Date: Fri Jan 8 17:31:24 2010 +0100
netfilter: ebtables: enforce CAPNETADMIN normal users are currently allowed to set/modify ebtables rules. Restrict it to processes with CAPNETADMIN. Note that this cannot be reproduced with unmodified ebtables binary because it uses SOCKRAW. Signed-off-by: Florian Westphal <fwestphal> Cc: stable Signed-off-by: Patrick McHardy <kaber>
Upstream commit: http://git.kernel.org/linus/dce766af541f6605fa9889892c0280bab31c66ab
Other sources
net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAPNETADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0007?
CVE-2010-0007 has been rated as a medium severity vulnerability due to its potential to permit unauthorized access to ebtables controls.
How do I fix CVE-2010-0007?
To fix CVE-2010-0007, ensure that the CAP_NET_ADMIN capability is enforced for processes modifying ebtables rules.
Which Linux kernel versions are affected by CVE-2010-0007?
CVE-2010-0007 affects multiple Linux kernel versions including 2.6.11, 2.6.23.4, and several others listed in the vulnerability details.
What kind of attack can exploit CVE-2010-0007?
CVE-2010-0007 can be exploited by local users to set or modify ebtables rules, potentially manipulating network traffic.
Is CVE-2010-0007 still a concern for current Linux systems?
While CVE-2010-0007 primarily affects older Linux kernel versions, it may still be a concern for systems running those vulnerable versions.