Novell Home

CVE-2010-3850

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2010-3850 at MITRE

Description

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

Note from the SUSE Security Team

The ECONET module is not enabled in SUSE Linux Enterprise 11 SP1, openSUSE 11.2 and 11.3. Older products are affected by this problem and will receive fixes.,The ECONET module is not enabled in SUSE Linux Enterprise 11 SP1, openSUSE 11.2 and 11.3. Older products are affected by this problem and will receive fixes.

Novell Bugzilla entries: 647632, 658461

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit
  • kernel-default >= 2.6.16.60-0.42.11
  • kernel-source >= 2.6.16.60-0.42.11
  • kernel-syms >= 2.6.16.60-0.42.11
sles10-sp2-ltss.s390x
ZYPP Patch Nr: 7538
openSUSE 11.2
  • kernel-debug-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-debug-debuginfo >= 2.6.31.14-0.8.1
  • kernel-debug-debugsource >= 2.6.31.14-0.8.1
  • kernel-debug-devel-debuginfo >= 2.6.31.14-0.8.1
  • kernel-default-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-default-debuginfo >= 2.6.31.14-0.8.1
  • kernel-default-debugsource >= 2.6.31.14-0.8.1
  • kernel-default-devel-debuginfo >= 2.6.31.14-0.8.1
  • kernel-desktop-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-desktop-debuginfo >= 2.6.31.14-0.8.1
  • kernel-desktop-debugsource >= 2.6.31.14-0.8.1
  • kernel-desktop-devel-debuginfo >= 2.6.31.14-0.8.1
  • kernel-pae-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-pae-debuginfo >= 2.6.31.14-0.8.1
  • kernel-pae-debugsource >= 2.6.31.14-0.8.1
  • kernel-pae-devel-debuginfo >= 2.6.31.14-0.8.1
  • kernel-trace-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-trace-debuginfo >= 2.6.31.14-0.8.1
  • kernel-trace-debugsource >= 2.6.31.14-0.8.1
  • kernel-trace-devel-debuginfo >= 2.6.31.14-0.8.1
  • kernel-vanilla-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-vanilla-debuginfo >= 2.6.31.14-0.8.1
  • kernel-vanilla-debugsource >= 2.6.31.14-0.8.1
  • kernel-vanilla-devel-debuginfo >= 2.6.31.14-0.8.1
  • kernel-xen-base-debuginfo >= 2.6.31.14-0.8.1
  • kernel-xen-debuginfo >= 2.6.31.14-0.8.1
  • kernel-xen-debugsource >= 2.6.31.14-0.8.1
  • kernel-xen-devel-debuginfo >= 2.6.31.14-0.8.1
  • preload-kmp-default-debuginfo >= 1.1_2.6.31.14_0.8-6.9.49
  • preload-kmp-desktop-debuginfo >= 1.1_2.6.31.14_0.8-6.9.49
openSUSE 11.2
  • kernel-debug >= 2.6.31.14-0.8.1
  • kernel-debug-base >= 2.6.31.14-0.8.1
  • kernel-debug-devel >= 2.6.31.14-0.8.1
  • kernel-default >= 2.6.31.14-0.8.1
  • kernel-default-base >= 2.6.31.14-0.8.1
  • kernel-default-devel >= 2.6.31.14-0.8.1
  • kernel-desktop >= 2.6.31.14-0.8.1
  • kernel-desktop-base >= 2.6.31.14-0.8.1
  • kernel-desktop-devel >= 2.6.31.14-0.8.1
  • kernel-pae >= 2.6.31.14-0.8.1
  • kernel-pae-base >= 2.6.31.14-0.8.1
  • kernel-pae-devel >= 2.6.31.14-0.8.1
  • kernel-source >= 2.6.31.14-0.8.1
  • kernel-source-vanilla >= 2.6.31.14-0.8.1
  • kernel-syms >= 2.6.31.14-0.8.1
  • kernel-trace >= 2.6.31.14-0.8.1
  • kernel-trace-base >= 2.6.31.14-0.8.1
  • kernel-trace-devel >= 2.6.31.14-0.8.1
  • kernel-vanilla >= 2.6.31.14-0.8.1
  • kernel-vanilla-base >= 2.6.31.14-0.8.1
  • kernel-vanilla-devel >= 2.6.31.14-0.8.1
  • kernel-xen >= 2.6.31.14-0.8.1
  • kernel-xen-base >= 2.6.31.14-0.8.1
  • kernel-xen-devel >= 2.6.31.14-0.8.1
  • preload-kmp-default >= 1.1_2.6.31.14_0.8-6.9.49
  • preload-kmp-desktop >= 1.1_2.6.31.14_0.8-6.9.49
Open Enterprise Server
  • kernel-bigsmp >= 2.6.5-7.325
  • kernel-debug >= 2.6.5-7.325
  • kernel-default >= 2.6.5-7.325
  • kernel-smp >= 2.6.5-7.325
  • kernel-source >= 2.6.5-7.325
  • kernel-syms >= 2.6.5-7.325
  • kernel-um >= 2.6.5-7.325
  • kernel-xen >= 2.6.5-7.325
  • kernel-xenpae >= 2.6.5-7.325
  • um-host-install-initrd >= 1.0-48.38
  • um-host-kernel >= 2.6.5-7.325
  • xen-kmp >= 3.0.4_2.6.5_7.325-0.2
sles9-oes.x86
YOU Patch Nr: 12678
SUSE Linux Enterprise Server 10 SP2 for x86
  • kernel-bigsmp >= 2.6.16.60-0.42.11
  • kernel-debug >= 2.6.16.60-0.42.11
  • kernel-default >= 2.6.16.60-0.42.11
  • kernel-kdump >= 2.6.16.60-0.42.11
  • kernel-smp >= 2.6.16.60-0.42.11
  • kernel-source >= 2.6.16.60-0.42.11
  • kernel-syms >= 2.6.16.60-0.42.11
  • kernel-vmi >= 2.6.16.60-0.42.11
  • kernel-vmipae >= 2.6.16.60-0.42.11
  • kernel-xen >= 2.6.16.60-0.42.11
  • kernel-xenpae >= 2.6.16.60-0.42.11
sles10-sp2-ltss.x86
ZYPP Patch Nr: 7537
SUSE Linux Enterprise Desktop 10 SP3 for x86
  • kernel-bigsmp >= 2.6.16.60-0.76.8
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-smp >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
  • kernel-xen >= 2.6.16.60-0.76.8
  • kernel-xenpae >= 2.6.16.60-0.76.8
sle10-sp3-sdk.x86
sles10-sp3.x86
sled10-sp3.x86
sles10-sp3-debuginfo.x86
ZYPP Patch Nr: 7303
SUSE Linux Enterprise SDK 10 SP3
  • kernel-debug >= 2.6.16.60-0.76.8
  • kernel-kdump >= 2.6.16.60-0.76.8
  • kernel-xen >= 2.6.16.60-0.76.8
  • kernel-xenpae >= 2.6.16.60-0.76.8
sle10-sp3-sdk.x86
sles10-sp3.x86
sled10-sp3.x86
sles10-sp3-debuginfo.x86
ZYPP Patch Nr: 7303
SUSE Linux Enterprise Server 10 SP3
  • kernel-bigsmp >= 2.6.16.60-0.76.8
  • kernel-debug >= 2.6.16.60-0.76.8
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-kdump >= 2.6.16.60-0.76.8
  • kernel-kdumppae >= 2.6.16.60-0.76.8
  • kernel-smp >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
  • kernel-vmi >= 2.6.16.60-0.76.8
  • kernel-vmipae >= 2.6.16.60-0.76.8
  • kernel-xen >= 2.6.16.60-0.76.8
  • kernel-xenpae >= 2.6.16.60-0.76.8
sle10-sp3-sdk.x86
sles10-sp3.x86
sled10-sp3.x86
sles10-sp3-debuginfo.x86
ZYPP Patch Nr: 7303
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T
  • kernel-debug >= 2.6.16.60-0.42.11
  • kernel-default >= 2.6.16.60-0.42.11
  • kernel-kdump >= 2.6.16.60-0.42.11
  • kernel-smp >= 2.6.16.60-0.42.11
  • kernel-source >= 2.6.16.60-0.42.11
  • kernel-syms >= 2.6.16.60-0.42.11
  • kernel-xen >= 2.6.16.60-0.42.11
sles10-sp2-ltss.x86-64
ZYPP Patch Nr: 7539
SUSE Linux Enterprise Real Time 11 SP1
  • brocade-bna-kmp-rt >= 2.1.0.0_2.6.33.7.2_rt30_0.3-0.2.9
  • iscsitarget-kmp-rt >= 1.4.19_2.6.33.7.2_rt30_0.3-0.7.26
  • kernel-rt >= 2.6.33.7.2-0.3.1
  • kernel-rt-base >= 2.6.33.7.2-0.3.1
  • kernel-rt-devel >= 2.6.33.7.2-0.3.1
  • kernel-rt_trace >= 2.6.33.7.2-0.3.1
  • kernel-rt_trace-base >= 2.6.33.7.2-0.3.1
  • kernel-rt_trace-devel >= 2.6.33.7.2-0.3.1
  • kernel-source-rt >= 2.6.33.7.2-0.3.1
  • kernel-syms-rt >= 2.6.33.7.2-0.3.1
  • ofed-kmp-rt >= 1.5.2_2.6.33.7.2_rt30_0.3-0.3.2
 x86-64
SAT Patch Nr: 3859
SUSE Linux Enterprise SDK 10 SP3
  • kernel-kdump >= 2.6.16.60-0.76.8
sles10-sp3-debuginfo.ppc
sle10-sp3-sdk.ppc
sles10-sp3.ppc
ZYPP Patch Nr: 7310
SUSE Linux Enterprise Server 10 SP3
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-iseries64 >= 2.6.16.60-0.76.8
  • kernel-kdump >= 2.6.16.60-0.76.8
  • kernel-ppc64 >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
sles10-sp3-debuginfo.ppc
sle10-sp3-sdk.ppc
sles10-sp3.ppc
ZYPP Patch Nr: 7310
SUSE Linux Enterprise Server 10 SP3
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
sles10-sp3.s390x
sles10-sp3-debuginfo.s390x
ZYPP Patch Nr: 7306
SUSE CORE 9 for AMD64 and Intel EM64T
  • kernel-default >= 2.6.5-7.329.TDC
  • kernel-smp >= 2.6.5-7.329.TDC
  • kernel-source >= 2.6.5-7.329.TDC
  • kernel-syms >= 2.6.5-7.329.TDC
  • xen-kmp >= 3.0.4_2.6.5_7.329.TDC_-0.3
Builds
YOU Patch Nr: 12814
SUSE Linux Enterprise SDK 10 SP3
  • kernel-debug >= 2.6.16.60-0.76.8
sles10-sp3.ia64
sle10-sp3-sdk.ia64
sles10-sp3-debuginfo.ia64
ZYPP Patch Nr: 7305
SUSE Linux Enterprise Server 10 SP3
  • kernel-debug >= 2.6.16.60-0.76.8
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
sles10-sp3.ia64
sle10-sp3-sdk.ia64
sles10-sp3-debuginfo.ia64
ZYPP Patch Nr: 7305
SUSE Linux Enterprise Server RT Solution 10 for x86
  • ib-bonding-kmp-rt >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • ib-bonding-kmp-rt_bigsmp >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • ib-bonding-kmp-rt_debug >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • ib-bonding-kmp-rt_timing >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • intel-igb >= 1.3.19.3-0.5.8
  • intel-igb-kmp-rt >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • intel-igb-kmp-rt_bigsmp >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • intel-igb-kmp-rt_debug >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • intel-igb-kmp-rt_timing >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • kernel-rt >= 2.6.22.19-0.43.1
  • kernel-rt_bigsmp >= 2.6.22.19-0.43.1
  • kernel-rt_debug >= 2.6.22.19-0.43.1
  • kernel-rt_timing >= 2.6.22.19-0.43.1
  • kernel-source >= 2.6.22.19-0.43.1
  • kernel-syms >= 2.6.22.19-0.43.1
  • ofed-cxgb3-NIC-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-cxgb3-NIC-kmp-rt_bigsmp >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-cxgb3-NIC-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-cxgb3-NIC-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt_bigsmp >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3
slert10-sp3.x86-64
slert10-sp3.x86
ZYPP Patch Nr: 7444
SUSE Linux Enterprise Server RT Solution 10 for AMD64 and Intel EM64T
  • ib-bonding-kmp-rt >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • ib-bonding-kmp-rt_debug >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • ib-bonding-kmp-rt_timing >= 0.9.0_2.6.22.19_0.43.1-1.22.8
  • intel-igb >= 1.3.19.3-0.5.8
  • intel-igb-kmp-rt >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • intel-igb-kmp-rt_debug >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • intel-igb-kmp-rt_timing >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8
  • kernel-rt >= 2.6.22.19-0.43.1
  • kernel-rt_debug >= 2.6.22.19-0.43.1
  • kernel-rt_timing >= 2.6.22.19-0.43.1
  • kernel-source >= 2.6.22.19-0.43.1
  • kernel-syms >= 2.6.22.19-0.43.1
  • ofed-cxgb3-NIC-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-cxgb3-NIC-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-cxgb3-NIC-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3
  • ofed-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3
slert10-sp3.x86-64
slert10-sp3.x86
ZYPP Patch Nr: 7444
openSUSE 11.3
  • kernel-debug-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-debug-debuginfo >= 2.6.34.8-0.2.1
  • kernel-debug-debugsource >= 2.6.34.8-0.2.1
  • kernel-debug-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-default-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-default-debuginfo >= 2.6.34.8-0.2.1
  • kernel-default-debugsource >= 2.6.34.8-0.2.1
  • kernel-default-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-desktop-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-desktop-debuginfo >= 2.6.34.8-0.2.1
  • kernel-desktop-debugsource >= 2.6.34.8-0.2.1
  • kernel-desktop-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-ec2-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-ec2-debuginfo >= 2.6.34.8-0.2.1
  • kernel-ec2-debugsource >= 2.6.34.8-0.2.1
  • kernel-ec2-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-ec2-extra-debuginfo >= 2.6.34.8-0.2.1
  • kernel-pae-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-pae-debuginfo >= 2.6.34.8-0.2.1
  • kernel-pae-debugsource >= 2.6.34.8-0.2.1
  • kernel-pae-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-trace-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-trace-debuginfo >= 2.6.34.8-0.2.1
  • kernel-trace-debugsource >= 2.6.34.8-0.2.1
  • kernel-trace-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-vanilla-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-vanilla-debuginfo >= 2.6.34.8-0.2.1
  • kernel-vanilla-debugsource >= 2.6.34.8-0.2.1
  • kernel-vanilla-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-vmi-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-vmi-debuginfo >= 2.6.34.8-0.2.1
  • kernel-vmi-debugsource >= 2.6.34.8-0.2.1
  • kernel-vmi-devel-debuginfo >= 2.6.34.8-0.2.1
  • kernel-xen-base-debuginfo >= 2.6.34.8-0.2.1
  • kernel-xen-debuginfo >= 2.6.34.8-0.2.1
  • kernel-xen-debugsource >= 2.6.34.8-0.2.1
  • kernel-xen-devel-debuginfo >= 2.6.34.8-0.2.1
  • preload-kmp-default-debuginfo >= 1.1_k2.6.34.8_0.2-19.1.19
  • preload-kmp-desktop-debuginfo >= 1.1_k2.6.34.8_0.2-19.1.19
openSUSE 11.3
  • kernel-debug >= 2.6.34.8-0.2.1
  • kernel-debug-base >= 2.6.34.8-0.2.1
  • kernel-debug-devel >= 2.6.34.8-0.2.1
  • kernel-default >= 2.6.34.8-0.2.1
  • kernel-default-base >= 2.6.34.8-0.2.1
  • kernel-default-devel >= 2.6.34.8-0.2.1
  • kernel-desktop >= 2.6.34.8-0.2.1
  • kernel-desktop-base >= 2.6.34.8-0.2.1
  • kernel-desktop-devel >= 2.6.34.8-0.2.1
  • kernel-devel >= 2.6.34.8-0.2.1
  • kernel-ec2 >= 2.6.34.8-0.2.1
  • kernel-ec2-base >= 2.6.34.8-0.2.1
  • kernel-ec2-devel >= 2.6.34.8-0.2.1
  • kernel-ec2-extra >= 2.6.34.8-0.2.1
  • kernel-pae >= 2.6.34.8-0.2.1
  • kernel-pae-base >= 2.6.34.8-0.2.1
  • kernel-pae-devel >= 2.6.34.8-0.2.1
  • kernel-source >= 2.6.34.8-0.2.1
  • kernel-source-vanilla >= 2.6.34.8-0.2.1
  • kernel-syms >= 2.6.34.8-0.2.1
  • kernel-trace >= 2.6.34.8-0.2.1
  • kernel-trace-base >= 2.6.34.8-0.2.1
  • kernel-trace-devel >= 2.6.34.8-0.2.1
  • kernel-vanilla >= 2.6.34.8-0.2.1
  • kernel-vanilla-base >= 2.6.34.8-0.2.1
  • kernel-vanilla-devel >= 2.6.34.8-0.2.1
  • kernel-vmi >= 2.6.34.8-0.2.1
  • kernel-vmi-base >= 2.6.34.8-0.2.1
  • kernel-vmi-devel >= 2.6.34.8-0.2.1
  • kernel-xen >= 2.6.34.8-0.2.1
  • kernel-xen-base >= 2.6.34.8-0.2.1
  • kernel-xen-devel >= 2.6.34.8-0.2.1
  • preload-kmp-default >= 1.1_k2.6.34.8_0.2-19.1.19
  • preload-kmp-desktop >= 1.1_k2.6.34.8_0.2-19.1.19
SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-smp >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
  • kernel-xen >= 2.6.16.60-0.76.8
sles10-sp3.x86-64
sled10-sp3.x86-64
sles10-sp3-debuginfo.x86-64
sle10-sp3-sdk.x86-64
ZYPP Patch Nr: 7304
SUSE Linux Enterprise SDK 10 SP3
SUSE Linux Enterprise Server for SAP 10 SP3
  • kernel-debug >= 2.6.16.60-0.76.8
  • kernel-default >= 2.6.16.60-0.76.8
  • kernel-kdump >= 2.6.16.60-0.76.8
  • kernel-smp >= 2.6.16.60-0.76.8
  • kernel-source >= 2.6.16.60-0.76.8
  • kernel-syms >= 2.6.16.60-0.76.8
  • kernel-xen >= 2.6.16.60-0.76.8
sles10-sp3.x86-64
sled10-sp3.x86-64
sles10-sp3-debuginfo.x86-64
sle10-sp3-sdk.x86-64
ZYPP Patch Nr: 7304
SUSE Linux Enterprise SDK 10 SP3
  • kernel-debug >= 2.6.16.60-0.76.8
  • kernel-kdump >= 2.6.16.60-0.76.8
  • kernel-xen >= 2.6.16.60-0.76.8
sles10-sp3.x86-64
sled10-sp3.x86-64
sles10-sp3-debuginfo.x86-64
sle10-sp3-sdk.x86-64
ZYPP Patch Nr: 7304

List of products where fixes are in QA

© 2014 Novell