NetSight
high7.2

CVE-2004-1337

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module …

Impact

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.

Affected products

VendorProductAffected versions
GnuRealtime Linux Security Module
Version 0.8.7
ConectivaLinux
Version 10.0
UbuntuUbuntu Linux
Version 4.1

References