NetSight
IP …
high7.2Public exploit code

CVE-2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK mess…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

Affected products

VendorProductAffected versions
Udev ProjectUdev
before 141
SuseLinux Enterprise Debuginfo
Versions 10, 11
OpensuseOpensuse
Versions 10.3, 11.0, 11.1
SuseLinux Enterprise Desktop
Versions 10, 11
SuseLinux Enterprise Server
Versions 10, 11
DebianDebian Linux
Versions 4.0, 5.0
CanonicalUbuntu Linux
Versions 6.06, 7.10, 8.04, 8.10
FedoraprojectFedora
Versions 9, 10
JuniperCtpview
before 7.1
Versions 7.1, 7.2

Weakness classification

CWE-346

References