Name: Vulnix
Price: 99 USD

Description

The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.htmlMailing List
http://osvdb.org/60201Broken Link
http://secunia.com/advisories/37909Broken Link
http://secunia.com/advisories/38017Broken Link
http://secunia.com/advisories/38276Broken Link
http://secunia.com/advisories/38492Broken Link
http://secunia.com/advisories/38779Broken Link
http://support.avaya.com/css/P8/documents/100073666Third Party Advisory
http://www.debian.org/security/2010/dsa-1996Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/11/13/1Mailing List
http://www.securityfocus.com/bid/37019Broken Link, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-864-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=526068Exploit, Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540Broken Link
https://rhn.redhat.com/errata/RHSA-2010-0046.htmlThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2010-0095.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.htmlMailing List
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.htmlMailing List
http://osvdb.org/60201Broken Link
http://secunia.com/advisories/37909Broken Link
http://secunia.com/advisories/38017Broken Link
http://secunia.com/advisories/38276Broken Link
http://secunia.com/advisories/38492Broken Link
http://secunia.com/advisories/38779Broken Link
http://support.avaya.com/css/P8/documents/100073666Third Party Advisory
http://www.debian.org/security/2010/dsa-1996Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/11/13/1Mailing List
http://www.securityfocus.com/bid/37019Broken Link, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-864-1Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=526068Exploit, Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10310Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7540Broken Link
https://rhn.redhat.com/errata/RHSA-2010-0046.htmlThird Party Advisory
https://rhn.redhat.com/errata/RHSA-2010-0095.htmlThird Party Advisory

Timeline

Published: Nov 16, 2009
Last modified: Jun 16, 2026
NVD status: Modified

CVE-2009-3939