CVE-2008-1669

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel 2.6.25.2之前的版本没有为fcntl泛函性应用一个特定的保护机制，这使得本地用户可以并行的执行代码，或者利用竞争条件获得"对描述符表格的再排序访问"。

CVE-2008-1669 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Linux kernel 2.6.25.2之前的版本没有为fcntl泛函性应用一个特定的保护机制，这使得本地用户可以并行的执行代码，或者利用竞争条件获得"对描述符表格的再排序访问"。 CVE-2008-1669 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2008-1669

I. Basic Information for CVE-2008-1669

Affected Products

II. Public POCs for CVE-2008-1669

III. Intelligence Information for CVE-2008-1669

Vendor Advisories for CVE-2008-1669 (30)

• http://secunia.com/advisories/30769 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30164 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30818 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30260 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30101 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30276 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31246 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30077 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30110 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30962 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30252 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30982 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30112 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/29076 vdb-entry x_refsource_BID
• http://secunia.com/advisories/30515 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30108 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30116 third-party-advisory x_refsource_SECUNIA
• http://www.securitytracker.com/id?1019974 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2008/dsa-1575 vendor-advisory x_refsource_DEBIAN
• http://www.ubuntu.com/usn/usn-618-1 vendor-advisory x_refsource_UBUNTU
• https://usn.ubuntu.com/614-1/ vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2008/1451/references vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2222/references vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/1452/references vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:167 vendor-advisory x_refsource_MANDRIVA
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 vendor-advisory x_refsource_MANDRIVA
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:104 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10065 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/491740/100/0/threaded mailing-list x_refsource_BUGTRAQ
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42242 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2008-1669 (5)

• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html vendor-advisory x_refsource_SUSE
• http://lists.vmware.com/pipermail/security-announce/2008/000023.html mailing-list x_refsource_MLIST

Other References for CVE-2008-1669 (9)

• https://issues.rpath.com/browse/RPL-2518 x_refsource_CONFIRM
• http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.4 x_refsource_CONFIRM
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0162 x_refsource_CONFIRM
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.2 x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2008-0233.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2008-0211.html vendor-advisory x_refsource_REDHAT
• https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00294.html vendor-advisory x_refsource_FEDORA
• https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00232.html vendor-advisory x_refsource_FEDORA
• https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00357.html vendor-advisory x_refsource_FEDORA

• https://www.cve.org/CVERecord?id=CVE-2008-1669

Same Patch Batch · n/a · 2008-05-08 · 14 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2008-1669