REDHAT-BUG-595579
First published: Tue May 25 2010(Updated: )
Description of problem: We should be checking for the ownership of the file for which flags are being set, rather than just for write access. Upstream commit: <a href="http://git.kernel.org/linus/7df0e0397b9a18358573274db9fdab991941062f">http://git.kernel.org/linus/7df0e0397b9a18358573274db9fdab991941062f</a> Acknowledgements: Red Hat would like to thank Dan Rosenberg for responsibly reporting this issue. Statement: Red Hat is aware of this issue and is tracking it via the following bug: <a href="https://bugzilla.redhat.com/CVE-2010-1641">https://bugzilla.redhat.com/CVE-2010-1641</a>. This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4 and Red Hat Enterprise MRG as they did not include support for the GFS2 file system. A future kernel update in Red Hat Enterprise Linux 5 will address this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Enterprise Linux | < |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/linus/7df0e0397b9a18358573274db9fdab991941062f
- https://bugzilla.redhat.com/CVE-2010-1641
- http://www.linux-archive.org/cluster-development/375481-gfs2-fix-permissions-checking-setflags-ioctl.html
- https://rhn.redhat.com/errata/RHSA-2010-0504.html
- https://bugzilla.redhat.com/show_bug.cgi?id=595579
Frequently Asked Questions
What is the severity of REDHAT-BUG-595579?
The severity of REDHAT-BUG-595579 is considered medium due to the potential misuse of file ownership checks.
How do I fix REDHAT-BUG-595579?
To fix REDHAT-BUG-595579, ensure that your system incorporates the latest patches that address the file ownership check issue.
What software versions are affected by REDHAT-BUG-595579?
REDHAT-BUG-595579 affects Red Hat Enterprise Linux 5 and may impact all versions prior to receiving a patch.
What is the main issue described in REDHAT-BUG-595579?
The main issue in REDHAT-BUG-595579 is the lack of ownership verification when setting file flags, potentially allowing unauthorized access.
Where can I find more information about REDHAT-BUG-595579?
More information about REDHAT-BUG-595579 can be found in the Red Hat Bugzilla database under the corresponding bug ID.
- agent/first-publish-date
- agent/last-modified-date
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-1641
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat enterprise linux