NetSight
IP …
low2.1

CVE-2011-1080

The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' charact…

Impact

The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.38.8
Versions 2.6.38, 2.6.38.1, 2.6.38.2, 2.6.38.3, 2.6.38.4

Weakness classification

CWE-20

References