Skip to Content
Solutions
+ Not Sure? Try our solution finder
Data Center

Virtualization & Workload Management

Business Service Management

Identity & Security

Compliance Management

Identity & Access Management

Security Management
End-User Computing

Collaboration

Endpoint Management

Markets

Cloud Computing

Intelligent Workload Management

Log Management
Looking for Linux? See our new home at SUSE.com
Products
Products By Category

Novell

Collaboration

Data Synchronizer

GroupWise

Open Workgroup Suite

Vibe

Endpoint Management

Endpoint Lifecycle Management Suite

Service Desk

ZENworks Application Virtualization

ZENworks Asset Management

ZENworks Configuration Management

ZENworks Endpoint Security Management

ZENworks Linux Management

ZENworks Patch Management

ZENworks Virtual Appliance

File & Networking Services

Business Continuity Clustering

File Management Suite

File Reporter

Filr

Open Enterprise Server

Storage Manager

NetIQ (Moving soon to NetIQ.com)

Data Center

Cloud Manager

Operations Center

PlateSpin Forge

PlateSpin Migrate

PlateSpin Orchestrate

PlateSpin Protect

PlateSpin Recon

Identity & Security

Access Governance Suite

Access Manager

Cloud Security Service

Compliance Management Platform

Identity Manager

LDAP Proxy

Privileged User Manager

SecureLogin

Sentinel

Sentinel Log Manager

Sentinel Rapid Deployment

Looking for Linux? See our new home at SUSE.com
A-Z

A

Access Governance Suite

Access Manager

B

BorderManager

Business Continuity Clustering

C

Client for Linux

Client for Windows XP/2000

Cloud Manager

Cloud Security Service

Cluster Services for Open Enterprise Server

Compliance Management Platform

D

Data Synchronizer

E

eDirectory

Endpoint Lifecycle Management Suite

F

File Management Suite

File Reporter

G

GroupWise

I

Identity Assurance Solution

Identity Audit

Identity Manager

Identity Manager Integration Modules

iFolder 2.1

iManager

J

JBoss Enterprise Middleware

L

LDAP Proxy

M

Modular Authentication Service (NMAS)

N

NFS Gateway for NetWare 6.5

NICI Encryption Modules

O

Open Enterprise Server

Open Workgroup Suite

Open Workgroup Suite Small Business Edition

Operations Center

P

PlateSpin Forge

PlateSpin Migrate

PlateSpin Orchestrate

PlateSpin Protect

PlateSpin Recon

Privileged User Manager

S

SecureLogin

Sentinel

Sentinel Log Manager

Service Desk

Storage Manager

V

Vibe

Z

ZENworks Application Virtualization

ZENworks Asset Management

ZENworks Configuration Management

ZENworks Virtual Appliance

ZENworks Endpoint Security Management

ZENworks Handheld Management

ZENworks Linux Management

ZENworks Patch Management

Looking for Linux? See our new home at SUSE.com
Services & Support
+ Novell Services Overview
Self Support

Knowledgebase

Novell Support Advisor

Discussion Forums

Documentation

Support by Product

Activate My Product

Technical Subscriptions

Support Programs

Support from Partner

Entitlement & Access

Open Service Request

Novell Support Programs

Product Support Lifecycle

Chat with Us (Non-technical Questions)
Technical Training

Look Up & Locate Training

Certification and Testing

Advanced Technical Training

Custom On-site Training

Free Training

On-demand Training

Online Training

Technical Skills Assessments

Training Partners

Contribute

Participate in Beta

Report Bug

Share a Tip, Trick, etc.

Request Enhancement

Report Software Vulnerability
Download

Patches

Products

Drivers

Beta

Cool Tools

Customer Center

My Profile

My Products

My Support

My Training

Open Service Request
IT Consulting

Why Consulting

Consulting Offerings

Delivery Excellence Reviews

Fast Tracks

NetWare to Open Enterprise Server

Novell Teaming

ZENworks Migration Assurance

PlateSpin Forge
Partners
+ Novell Partners Overview
Partner With Novell

Solution Provider & System Integrator

Hardware Vendor

Software Vendor

Training Provider

PartnerNet

PartnerNet Login

PartnerNet Community

Enablement Central
Find a Partner

Partner Locator

SUSE Linux Enterprise ISV Catalog

Certified Partner Products

Developers

YES Certified Program

Developer Community
Communities
+ Novell Communities Overview
User Communities

Social Networks

Novell Blogs & Podcasts
About Novell
+ About Novell
Contact Us

Our Customers

Executive Management

Job Search

Connection Magazine

Events

Media Gallery

Industry Analysts

Press Releases

Subscribe
How to Buy
+ How to Buy Overview
Request a Call

Find a Partner

shopNovell

Shop for Training

Volume Licensing & Buying Programs

Novell Merchandise

CVE-2009-1337

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2009-1337 at MITRE

Description

The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.

NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entry: 492768

SUSE Security Advisories:

SUSE-SA:2009:028, published Wed, 20 May 2009 18:00:00 +0000
SUSE-SA:2009:030, published Mon, 08 Jun 2009 18:00:00 +0000
SUSE-SA:2009:031, published Mon, 09 Jun 2009 09:00:00 +0000
SUSE-SA:2009:032, published Tue, 09 Jun 2009 11:00:00 +0000
SUSE-SA:2009:033, published Tue, 16 Jun 2009 12:00:00 +0000

List of released packages

Product(s)	Fixed package version(s)	References
Novell Linux Desktop 9 for x86_64	`kernel-default >= 2.6.5-7.317` `kernel-smp >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317`	sles9-nld.x86-64 YOU Patch Nr: 12426
Novell Linux Desktop 9 for x86	`kernel-bigsmp >= 2.6.5-7.317` `kernel-default >= 2.6.5-7.317` `kernel-smp >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317`	sles9-nld.x86 sles9-oes.x86 YOU Patch Nr: 12432
Open Enterprise Server	`kernel-bigsmp >= 2.6.5-7.317` `kernel-debug >= 2.6.5-7.317` `kernel-default >= 2.6.5-7.317` `kernel-smp >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317` `kernel-um >= 2.6.5-7.317` `kernel-xen >= 2.6.5-7.317` `kernel-xenpae >= 2.6.5-7.317` `um-host-install-initrd >= 1.0-48.31` `um-host-kernel >= 2.6.5-7.317`	sles9-nld.x86 sles9-oes.x86 YOU Patch Nr: 12432
SLE 11 SERVER Unsupported Extras	`kernel-default-extra >= 2.6.27.23-0.1.1`	Builds SAT Patch Nr: 937
SLE 11 SERVER Unsupported Extras	`kernel-default-extra >= 2.6.27.23-0.1.1` `kernel-ppc64-extra >= 2.6.27.23-0.1.1`	Builds SAT Patch Nr: 939
SLE 11 SERVER Unsupported Extras	`kernel-default-extra >= 2.6.27.23-0.1.1` `kernel-pae-extra >= 2.6.27.23-0.1.1` `kernel-xen-extra >= 2.6.27.23-0.1.1`	Builds SAT Patch Nr: 935
SUSE Linux Enterprise High Availability Extension 11	`cluster-network-kmp-default >= 1.4_2.6.27.23_0.1-2.1.7` `cluster-network-kmp-ppc64 >= 1.4_2.6.27.23_0.1-2.1.7` `ocfs2-kmp-default >= 1.4_2.6.27.23_0.1-4.1.7` `ocfs2-kmp-ppc64 >= 1.4_2.6.27.23_0.1-4.1.7`	sle11-debuginfo.ppc sles11.ppc sle11-hae.ppc SAT Patch Nr: 931
SUSE CORE 9 for IBM S/390 31bit	`kernel-s390 >= 2.6.5-7.317` `kernel-s390-debug >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317`	core9.s390 YOU Patch Nr: 12427
SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM POWER	`kernel-default-debuginfo >= 2.6.16.60-0.39.3` `kernel-iseries64-debuginfo >= 2.6.16.60-0.39.3` `kernel-kdump-debuginfo >= 2.6.16.60-0.39.3` `kernel-ppc64-debuginfo >= 2.6.16.60-0.39.3`	sles10-sp2.ppc sles10-sp2-debuginfo.ppc sle10-sp2-sdk.ppc ZYPP Patch Nr: 6235
SUSE Linux Enterprise Server 10 SP2 for IBM POWER	`kernel-default >= 2.6.16.60-0.39.3` `kernel-iseries64 >= 2.6.16.60-0.39.3` `kernel-kdump >= 2.6.16.60-0.39.3` `kernel-ppc64 >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3`	sles10-sp2.ppc sles10-sp2-debuginfo.ppc sle10-sp2-sdk.ppc ZYPP Patch Nr: 6235
SUSE CORE 9 for IBM zSeries 64bit	`kernel-s390x >= 2.6.5-7.317` `kernel-s390x-debug >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317`	core9.s390x YOU Patch Nr: 12430
SUSE CORE 9 for IBM POWER	`kernel-default >= 2.6.5-7.317` `kernel-iseries64 >= 2.6.5-7.317` `kernel-pmac64 >= 2.6.5-7.317` `kernel-pseries64 >= 2.6.5-7.317` `kernel-smp >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317`	core9.ppc YOU Patch Nr: 12429
SUSE Linux Enterprise High Availability Extension 11	`cluster-network-kmp-default >= 1.4_2.6.27.23_0.1-2.1.7` `ocfs2-kmp-default >= 1.4_2.6.27.23_0.1-4.1.7`	sle11-debuginfo.s390x sle11-hae.s390x sles11.s390x SAT Patch Nr: 929
SUSE Linux Enterprise High Availability Extension 11	`cluster-network-kmp-default >= 1.4_2.6.27.23_0.1-2.1.7` `cluster-network-kmp-pae >= 1.4_2.6.27.23_0.1-2.1.7` `cluster-network-kmp-xen >= 1.4_2.6.27.23_0.1-2.1.7` `ocfs2-kmp-default >= 1.4_2.6.27.23_0.1-4.1.7` `ocfs2-kmp-pae >= 1.4_2.6.27.23_0.1-4.1.7` `ocfs2-kmp-xen >= 1.4_2.6.27.23_0.1-4.1.7`	sled11.x86 sles11.x86 sle11-hae.x86 sle11-debuginfo.x86 SAT Patch Nr: 927
Novell Linux POS 9 SUSE CORE 9 for x86	`kernel-bigsmp >= 2.6.5-7.317` `kernel-debug >= 2.6.5-7.317` `kernel-default >= 2.6.5-7.317` `kernel-smp >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317` `kernel-um >= 2.6.5-7.317` `kernel-xen >= 2.6.5-7.317` `kernel-xenpae >= 2.6.5-7.317` `um-host-install-initrd >= 1.0-48.31` `um-host-kernel >= 2.6.5-7.317`	core9.x86 sles9-nlpos.x86 YOU Patch Nr: 12428
SUSE Linux Enterprise 10 SP2 DEBUGINFO for IPF	`kernel-debug-debuginfo >= 2.6.16.60-0.39.3` `kernel-default-debuginfo >= 2.6.16.60-0.39.3` `kernel-source-debuginfo >= 2.6.16.60-0.39.3`	sle10-sp2-sdk.ia64 sles10-sp2-debuginfo.ia64 sles10-sp2.ia64 ZYPP Patch Nr: 6234
SUSE Linux Enterprise Server 10 SP2 for IPF	`kernel-debug >= 2.6.16.60-0.39.3` `kernel-default >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3`	sle10-sp2-sdk.ia64 sles10-sp2-debuginfo.ia64 sles10-sp2.ia64 ZYPP Patch Nr: 6234
SUSE Linux Enterprise High Availability Extension 11	`cluster-network-kmp-default >= 1.4_2.6.27.23_0.1-2.1.7` `cluster-network-kmp-xen >= 1.4_2.6.27.23_0.1-2.1.7` `ocfs2-kmp-default >= 1.4_2.6.27.23_0.1-4.1.7` `ocfs2-kmp-xen >= 1.4_2.6.27.23_0.1-4.1.7`	sled11.x86-64 sles11.x86-64 sle11-debuginfo.x86-64 sle11-hae.x86-64 SAT Patch Nr: 930
SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T	`kernel-default >= 2.6.16.60-0.39.3` `kernel-smp >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3` `kernel-xen >= 2.6.16.60-0.39.3`	sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.x86-64 sles10-sp2.x86-64 sled10-sp2.x86-64 ZYPP Patch Nr: 6236
SUSE Linux Enterprise 10 SP2 DEBUGINFO for AMD64 and Intel EM64T	`kernel-debug-debuginfo >= 2.6.16.60-0.39.3` `kernel-default-debuginfo >= 2.6.16.60-0.39.3` `kernel-kdump-debuginfo >= 2.6.16.60-0.39.3` `kernel-smp-debuginfo >= 2.6.16.60-0.39.3` `kernel-source-debuginfo >= 2.6.16.60-0.39.3` `kernel-xen-debuginfo >= 2.6.16.60-0.39.3`	sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.x86-64 sles10-sp2.x86-64 sled10-sp2.x86-64 ZYPP Patch Nr: 6236
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T	`kernel-debug >= 2.6.16.60-0.39.3` `kernel-default >= 2.6.16.60-0.39.3` `kernel-kdump >= 2.6.16.60-0.39.3` `kernel-smp >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3` `kernel-xen >= 2.6.16.60-0.39.3`	sles10-sp2-debuginfo.x86-64 sle10-sp2-sdk.x86-64 sles10-sp2.x86-64 sled10-sp2.x86-64 ZYPP Patch Nr: 6236
SUSE CORE 9 for Itanium Processor Family	`kernel-64k-pagesize >= 2.6.5-7.317` `kernel-debug >= 2.6.5-7.317` `kernel-default >= 2.6.5-7.317` `kernel-sn2 >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317`	core9.ia64 YOU Patch Nr: 12433
SUSE Linux Enterprise Desktop 10 SP2 for x86	`kernel-bigsmp >= 2.6.16.60-0.39.3` `kernel-default >= 2.6.16.60-0.39.3` `kernel-smp >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3` `kernel-xen >= 2.6.16.60-0.39.3` `kernel-xenpae >= 2.6.16.60-0.39.3`	sled10-sp2.x86 sles10-sp2-debuginfo.x86 sles10-sp2.x86 sle10-sp2-sdk.x86 ZYPP Patch Nr: 6237
SUSE Linux Enterprise 10 SP2 DEBUGINFO for x86	`kernel-bigsmp-debuginfo >= 2.6.16.60-0.39.3` `kernel-debug-debuginfo >= 2.6.16.60-0.39.3` `kernel-default-debuginfo >= 2.6.16.60-0.39.3` `kernel-kdump-debuginfo >= 2.6.16.60-0.39.3` `kernel-smp-debuginfo >= 2.6.16.60-0.39.3` `kernel-source-debuginfo >= 2.6.16.60-0.39.3` `kernel-xen-debuginfo >= 2.6.16.60-0.39.3` `kernel-xenpae-debuginfo >= 2.6.16.60-0.39.3`	sled10-sp2.x86 sles10-sp2-debuginfo.x86 sles10-sp2.x86 sle10-sp2-sdk.x86 ZYPP Patch Nr: 6237
SUSE Linux Enterprise Server 10 SP2 for x86	`kernel-bigsmp >= 2.6.16.60-0.39.3` `kernel-debug >= 2.6.16.60-0.39.3` `kernel-default >= 2.6.16.60-0.39.3` `kernel-kdump >= 2.6.16.60-0.39.3` `kernel-smp >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3` `kernel-vmi >= 2.6.16.60-0.39.3` `kernel-vmipae >= 2.6.16.60-0.39.3` `kernel-xen >= 2.6.16.60-0.39.3` `kernel-xenpae >= 2.6.16.60-0.39.3`	sled10-sp2.x86 sles10-sp2-debuginfo.x86 sles10-sp2.x86 sle10-sp2-sdk.x86 ZYPP Patch Nr: 6237
openSUSE 10.3	`kernel-bigsmp >= 2.6.22.19-0.3` `kernel-debug >= 2.6.22.19-0.3` `kernel-default >= 2.6.22.19-0.3` `kernel-kdump >= 2.6.22.19-0.3` `kernel-ppc64 >= 2.6.22.19-0.3` `kernel-source >= 2.6.22.19-0.3` `kernel-syms >= 2.6.22.19-0.3` `kernel-xen >= 2.6.22.19-0.3` `kernel-xenpae >= 2.6.22.19-0.3`
SLE 11 SERVER Unsupported Extras	`kernel-default-extra >= 2.6.27.23-0.1.1` `kernel-xen-extra >= 2.6.27.23-0.1.1`	Builds SAT Patch Nr: 940
SUSE Linux Enterprise High Availability Extension 11	`cluster-network-kmp-default >= 1.4_2.6.27.23_0.1-2.1.7` `ocfs2-kmp-default >= 1.4_2.6.27.23_0.1-4.1.7`	sle11-hae.ia64 sle11-debuginfo.ia64 sles11.ia64 SAT Patch Nr: 928
SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM zSeries 64bit	`kernel-default-debuginfo >= 2.6.16.60-0.39.3`	sles10-sp2.s390x sles10-sp2-debuginfo.s390x ZYPP Patch Nr: 6238
SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit	`kernel-default >= 2.6.16.60-0.39.3` `kernel-source >= 2.6.16.60-0.39.3` `kernel-syms >= 2.6.16.60-0.39.3`	sles10-sp2.s390x sles10-sp2-debuginfo.s390x ZYPP Patch Nr: 6238
SUSE CORE 9 for AMD64 and Intel EM64T	`kernel-default >= 2.6.5-7.329.TDC` `kernel-smp >= 2.6.5-7.329.TDC` `kernel-source >= 2.6.5-7.329.TDC` `kernel-syms >= 2.6.5-7.329.TDC` `xen-kmp >= 3.0.4_2.6.5_7.329.TDC_-0.3`	Builds YOU Patch Nr: 12814
SLE 11 SERVER Unsupported Extras	`kernel-default-extra >= 2.6.27.23-0.1.1`	Builds SAT Patch Nr: 936
SUSE CORE 9 for AMD64 and Intel EM64T	`kernel-default >= 2.6.5-7.317` `kernel-smp >= 2.6.5-7.317` `kernel-source >= 2.6.5-7.317` `kernel-syms >= 2.6.5-7.317` `kernel-xen >= 2.6.5-7.317`	core9.x86-64 YOU Patch Nr: 12431

© 2012 Novell