CVE-2010-1146

MediumCVSS 6.9/10Last modified Jun 16, 2026

Description

The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfs_priv directory, which allows local users to gain privileges by modifying (1) extended attributes or (2) ACLs, as demonstrated by deleting a file under .reiserfs_priv/xattrs/.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=linux-kernel&m=127076012022155&w=2Mailing List, Patch, Third Party Advisory
http://osvdb.org/63601Broken Link
http://secunia.com/advisories/39316Broken Link
http://www.exploit-db.com/exploits/12130Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39344Exploit, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=568041Exploit, Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57782Third Party Advisory, VDB Entry
http://marc.info/?l=linux-kernel&m=127076012022155&w=2Mailing List, Patch, Third Party Advisory
http://osvdb.org/63601Broken Link
http://secunia.com/advisories/39316Broken Link
http://www.exploit-db.com/exploits/12130Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39344Exploit, Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=568041Exploit, Issue Tracking, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57782Third Party Advisory, VDB Entry

Timeline

Published: Apr 12, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-11476.0Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arb CVE-2010-11484.7The cifs_create function in fs/cifs/dir.c in the Linux kernel 2.6.33.2 and earlier allows local users to cause a denial of service (NULL poi CVE-2010-11492.1probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TY CVE-2010-11506.0MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, whic CVE-2010-11516.8Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possi CVE-2010-11525.0memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that trigg CVE-2010-11536.8PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code CVE-2010-11556.8Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) fiel CVE-2010-11564.3core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)CVE-2010-11572.6Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by CVE-2010-11585.0Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consu CVE-2010-11596.8Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbit