CVE-2008-4210

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable file in a setgid directory through the (1) truncate or (2) ftruncate function in conjunction with memory-mapped I/O.

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.14% chance of exploitation in the next 30 days, 82nd percentile

Published

2008-09-29

Updated

2024-08-07

Proof-of-concept exploits (1)

• 0b0111100/20080★ · 2026-09-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6851

Exploit collections (1)

• CVE-2008-4210helloexp/0day

Security advisories

• http://www.mandriva.com/security/advisories?name=MDVSA-2008:220
• http://www.redhat.com/support/errata/RHSA-2008-0787.html
• http://www.redhat.com/support/errata/RHSA-2008-0957.html
• http://www.redhat.com/support/errata/RHSA-2008-0973.html
• http://www.securityfocus.com/bid/31368
• http://www.ubuntu.com/usn/usn-679-1

References

• CVE Record
• NVD entry

Related

• CVE-2004-0077
• CVE-2004-1235
• CVE-2005-0736
• CVE-2005-1263
• CVE-2006-2451
• CVE-2006-3626