Linux Kernel NFS ACL Access Control Bypass Vulnerability

Bugtraq ID:	16570
Class:	Access Validation Error
CVE:	CVE-2005-3623
Remote:	Yes
Local:	No
Published:	Feb 09 2006 12:00AM
Updated:	Jan 25 2007 04:19PM
Credit:	Martin Walter <[email protected]> reported this issue to the vendor.
Vulnerable:	SuSE SUSE Linux Enterprise Server 8 + Linux kernel 2.4.21 + Linux kernel 2.4.19 SuSE Linux Openexchange Server SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SUSE LINUX Retail Solution 8.0 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. SuSE Linux Open-Xchange 4.1 S.u.S.E. Open-Enterprise-Server 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Office Server S.u.S.E. Linux Enterprise Server for S/390 9.0 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. Linux Database Server 0 S.u.S.E. Linux Connectivity Server Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0 Linux kernel 2.6.14 .4 Linux kernel 2.6.14 .3 Linux kernel 2.6.14 .2 Linux kernel 2.6.14 .1 Linux kernel 2.6.14 -rc4 Linux kernel 2.6.14 -rc3 Linux kernel 2.6.14 -rc2 Linux kernel 2.6.14 -rc1 Linux kernel 2.6.14 Linux kernel 2.6.13 .4 Linux kernel 2.6.13 .3 Linux kernel 2.6.13 .2 Linux kernel 2.6.13 .1 Linux kernel 2.6.13 -rc7 Linux kernel 2.6.13 -rc6 Linux kernel 2.6.13 -rc4 Linux kernel 2.6.13 -rc1 Linux kernel 2.6.13 Linux kernel 2.6.12 .6 Linux kernel 2.6.12 .5 Linux kernel 2.6.12 .4 Linux kernel 2.6.12 .3 Linux kernel 2.6.12 .2 Linux kernel 2.6.12 .1 Linux kernel 2.6.12 -rc5 Linux kernel 2.6.12 -rc4 Linux kernel 2.6.12 -rc1 Linux kernel 2.6.11 .8 Linux kernel 2.6.11 .7 Linux kernel 2.6.11 .6 Linux kernel 2.6.11 .5 Linux kernel 2.6.11 .12 Linux kernel 2.6.11 .11 Linux kernel 2.6.11 -rc4 Linux kernel 2.6.11 -rc3 Linux kernel 2.6.11 -rc2 Linux kernel 2.6.11 + Redhat Fedora Core4 Linux kernel 2.6.10 rc2 Linux kernel 2.6.10 Linux kernel 2.6.9 Linux kernel 2.6.8 rc3 Linux kernel 2.6.8 rc2 Linux kernel 2.6.8 rc1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 Linux kernel 2.6.8 Linux kernel 2.6.7 rc1 Linux kernel 2.6.7 Linux kernel 2.6.6 rc1 Linux kernel 2.6.6 Linux kernel 2.6.5 Linux kernel 2.6.4 Linux kernel 2.6.3 Linux kernel 2.6.2 Linux kernel 2.6.1 -rc2 Linux kernel 2.6.1 -rc1 Linux kernel 2.6.1 Linux kernel 2.6 .10 Linux kernel 2.6 -test9-CVS Linux kernel 2.6 -test9 Linux kernel 2.6 -test8 Linux kernel 2.6 -test7 Linux kernel 2.6 -test6 Linux kernel 2.6 -test5 Linux kernel 2.6 -test4 Linux kernel 2.6 -test3 Linux kernel 2.6 -test2 Linux kernel 2.6 -test11 Linux kernel 2.6 -test10 Linux kernel 2.6 -test1 Linux kernel 2.6 Avaya S8710 R2.0.1 Avaya S8710 R2.0.0 Avaya S8710 CM 3.1 Avaya S8700 R2.0.1 Avaya S8700 R2.0.0 Avaya S8700 CM 3.1 Avaya S8500 R2.0.1 Avaya S8500 R2.0.0 Avaya S8500 CM 3.1 Avaya S8500 0 Avaya S8300 R2.0.1 Avaya S8300 R2.0.0 Avaya S8300 CM 3.1 Avaya S8300 0 Avaya Messaging Storage Server MM3.0 Avaya Converged Communications Server 2.0
Not Vulnerable:	Linux kernel 2.6.14 .5

Linux Kernel NFS ACL Access Control Bypass Vulnerability

The Linux kernel's NFS implementation is prone to a remote access-control-bypass vulnerability. The software fails to validate the privileges of remote users before setting ACLs.

This issue allows remote attackers to improperly alter ACLs on NFS filesystems, allowing them to bypass access controls. Disclosure of sensitive information, modification of arbitrary files, and other attacks are possible.

Kernel versions prior to 2.6.14.5 in the 2.6 kernel series are vulnerable to this issue.

Linux Kernel NFS ACL Access Control Bypass Vulnerability

An exploit is not required.

Linux Kernel NFS ACL Access Control Bypass Vulnerability

Solution:
The vendor has released version 2.6.14.5 of the Linux kernel to address this issue.

Please see the referenced vendor advisories for details on obtaining and applying fixes.


S.u.S.E. Linux Professional 10.0

• SuSE kernel-default-2.6.13-15.8.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-default-2. 6.13-15.8.ppc.rpm


• SuSE kernel-default-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default -2.6.13-15.8.x86_64.rpm


• SuSE kernel-default-nongpl-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default -nongpl-2.6.13-15.8.x86_64.rpm


• SuSE kernel-iseries64-2.6.13-15.8.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-iseries64- 2.6.13-15.8.ppc.rpm


• SuSE kernel-ppc64-2.6.13-15.8.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-ppc64-2.6. 13-15.8.ppc.rpm


• SuSE kernel-smp-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-2.6 .13-15.8.x86_64.rpm


• SuSE kernel-smp-nongpl-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-non gpl-2.6.13-15.8.x86_64.rpm


• SuSE kernel-source-2.6.13-15.8.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-source-2.6 .13-15.8.ppc.rpm


• SuSE kernel-source-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-source- 2.6.13-15.8.x86_64.rpm


• SuSE kernel-syms-2.6.13-15.8.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-syms-2.6.1 3-15.8.ppc.rpm


• SuSE kernel-syms-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-syms-2. 6.13-15.8.x86_64.rpm


• SuSE kernel-xen-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-2.6 .13-15.8.x86_64.rpm


• SuSE kernel-xen-nongpl-2.6.13-15.8.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-non gpl-2.6.13-15.8.x86_64.rpm


• SuSE xen-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-3.0_8259-0 .1.x86_64.rpm


• SuSE xen-devel-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-devel-3.0_ 8259-0.1.x86_64.rpm


• SuSE xen-doc-html-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-doc-html-3 .0_8259-0.1.x86_64.rpm


• SuSE xen-doc-pdf-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-doc-pdf-3. 0_8259-0.1.x86_64.rpm


• SuSE xen-doc-ps-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-doc-ps-3.0 _8259-0.1.x86_64.rpm


• SuSE xen-tools-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-tools-3.0_ 8259-0.1.x86_64.rpm


• SuSE xen-tools-ioemu-3.0_8259-0.1.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/xen-tools-ioem u-3.0_8259-0.1.x86_64.rpm

Linux kernel 2.6 -test6

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test11

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test9-CVS

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test3

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 .10

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test5

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test1

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test7

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6 -test9

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.10 rc2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.11

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2


• SuSE Intel-536ep-4.69-10.5.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/Intel-536ep-4.69- 10.5.i586.rpm


• SuSE kernel-bigsmp-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-bigsmp-2.6 .11.4-21.11.i586.rpm


• SuSE kernel-bigsmp-nongpl-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-bigsmp-non gpl-2.6.11.4-21.11.i586.rpm


• SuSE kernel-default-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-default-2. 6.11.4-21.11.i586.rpm


• SuSE kernel-default-2.6.11.4-21.11.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-default- 2.6.11.4-21.11.x86_64.rpm


• SuSE kernel-default-nongpl-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-default-no ngpl-2.6.11.4-21.11.i586.rpm


• SuSE kernel-default-nongpl-2.6.11.4-21.11.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-default- nongpl-2.6.11.4-21.11.x86_64.rpm


• SuSE kernel-docs-2.6.11.4-21.11.noarch.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/noarch/kernel-docs-2.6 .11.4-21.11.noarch.rpm


• SuSE kernel-smp-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-smp-2.6.11 .4-21.11.i586.rpm


• SuSE kernel-smp-2.6.11.4-21.11.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-smp-2.6. 11.4-21.11.x86_64.rpm


• SuSE kernel-smp-nongpl-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-smp-nongpl -2.6.11.4-21.11.i586.rpm


• SuSE kernel-smp-nongpl-2.6.11.4-21.11.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-smp-nong pl-2.6.11.4-21.11.x86_64.rpm


• SuSE kernel-source-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-source-2.6 .11.4-21.11.i586.rpm


• SuSE kernel-source-2.6.11.4-21.11.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-source-2 .6.11.4-21.11.x86_64.rpm


• SuSE kernel-syms-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-syms-2.6.1 1.4-21.11.i586.rpm


• SuSE kernel-syms-2.6.11.4-21.11.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/kernel-syms-2.6 .11.4-21.11.x86_64.rpm


• SuSE kernel-um-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-um-2.6.11. 4-21.11.i586.rpm


• SuSE kernel-um-nongpl-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-um-nongpl- 2.6.11.4-21.11.i586.rpm


• SuSE kernel-xen-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-xen-2.6.11 .4-21.11.i586.rpm


• SuSE kernel-xen-nongpl-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/kernel-xen-nongpl -2.6.11.4-21.11.i586.rpm


• SuSE ltmodem-8.31a10-7.5.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ltmodem-8.31a10-7 .5.i586.rpm


• SuSE um-host-install-initrd-1.0-50.5.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/um-host-install-i nitrd-1.0-50.5.i586.rpm


• SuSE um-host-kernel-2.6.11.4-21.11.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/um-host-kernel-2. 6.11.4-21.11.i586.rpm

Linux kernel 2.6.11 .6

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.11 .12

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.11 -rc2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.11 .5

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.11 -rc3

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 .4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 .3

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 .1

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 .5

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 -rc4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 .2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.12 .6

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.13 -rc4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.13 .3

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.13

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2


• SuSE Intel-536ep-4.69-14.3.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/Intel-536ep-4.69 -14.3.i586.rpm


• SuSE kernel-bigsmp-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-bigsmp-2. 6.13-15.8.i586.rpm


• SuSE kernel-bigsmp-nongpl-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-bigsmp-no ngpl-2.6.13-15.8.i586.rpm


• SuSE kernel-default-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-2 .6.13-15.8.i586.rpm


• SuSE kernel-default-nongpl-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-n ongpl-2.6.13-15.8.i586.rpm


• SuSE kernel-smp-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-smp-2.6.1 3-15.8.i586.rpm


• SuSE kernel-smp-nongpl-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-smp-nongp l-2.6.13-15.8.i586.rpm


• SuSE kernel-source-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-source-2. 6.13-15.8.i586.rpm


• SuSE kernel-syms-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-syms-2.6. 13-15.8.i586.rpm


• SuSE kernel-um-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-um-2.6.13 -15.8.i586.rpm


• SuSE kernel-um-nongpl-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-um-nongpl -2.6.13-15.8.i586.rpm


• SuSE kernel-xen-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-2.6.1 3-15.8.i586.rpm


• SuSE kernel-xen-nongpl-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-nongp l-2.6.13-15.8.i586.rpm


• SuSE um-host-kernel-2.6.13-15.8.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/um-host-kernel-2 .6.13-15.8.i586.rpm


• SuSE xen-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-3.0_8259-0.1 .i586.rpm


• SuSE xen-devel-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-devel-3.0_82 59-0.1.i586.rpm


• SuSE xen-doc-html-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-html-3.0 _8259-0.1.i586.rpm


• SuSE xen-doc-pdf-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-pdf-3.0_ 8259-0.1.i586.rpm


• SuSE xen-doc-ps-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-doc-ps-3.0_8 259-0.1.i586.rpm


• SuSE xen-tools-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-tools-3.0_82 59-0.1.i586.rpm


• SuSE xen-tools-ioemu-3.0_8259-0.1.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/xen-tools-ioemu- 3.0_8259-0.1.i586.rpm

Linux kernel 2.6.13 -rc7

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.13 -rc1

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.13 .2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.14 -rc2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.14 .4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.14 -rc3

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.14

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.14 -rc1

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.14 -rc4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.4

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2


• SuSE antivir-2.1.0-20.4.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/antivir-2.1.0-20. 4.i586.rpm


• SuSE drbd-0.7.14-0.6.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/drbd-0.7.14-0.6.i 586.rpm


• SuSE drbd-0.7.14-0.6.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/drbd-0.7.14-0 .6.x86_64.rpm


• SuSE kernel-bigsmp-2.6.5-7.252.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6 .5-7.252.i586.rpm


• SuSE kernel-default-2.6.5-7.252.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-default-2. 6.5-7.252.i586.rpm


• SuSE kernel-default-2.6.5-7.252.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-defaul t-2.6.5-7.252.x86_64.rpm


• SuSE kernel-docs-2.6.5-7.252.noarch.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/noarch/kernel-docs-2.6 .5-7.252.noarch.rpm


• SuSE kernel-docs-2.6.5-7.252.noarch.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/noarch/kernel-docs-2 .6.5-7.252.noarch.rpm


• SuSE kernel-smp-2.6.5-7.252.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-smp-2.6.5- 7.252.i586.rpm


• SuSE kernel-smp-2.6.5-7.252.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-smp-2. 6.5-7.252.x86_64.rpm


• SuSE kernel-source-2.6.5-7.252.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-source-2.6 .5-7.252.i586.rpm


• SuSE kernel-source-2.6.5-7.252.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-source -2.6.5-7.252.x86_64.rpm


• SuSE kernel-syms-2.6.5-7.252.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-syms-2.6.5 -7.252.i586.rpm


• SuSE kernel-syms-2.6.5-7.252.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-syms-2 .6.5-7.252.x86_64.rpm


• SuSE km_antivir-2.1.0-20.4.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/km_antivir-2.1.0- 20.4.i586.rpm


• SuSE km_drbd-0.7.14-0.6.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/km_drbd-0.7.14-0. 6.i586.rpm


• SuSE km_drbd-0.7.14-0.6.x86_64.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/km_drbd-0.7.1 4-0.6.x86_64.rpm


• SuSE ltmodem-2.6.2-38.22.i586.rpm
  SUSE LINUX 9.1:
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/ltmodem-2.6.2-38. 22.i586.rpm

Linux kernel 2.6.7 rc1

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.7

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.8 rc3

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.8 rc2

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux kernel 2.6.8 rc1

• Linux linux-2.6.14.5.tar.bz2
  http://www.kernel.org/pub/linux/kernel/v2.6/linux-2.6.14.5.tar.bz2

Linux Kernel NFS ACL Access Control Bypass Vulnerability

References:

• [patch 19/19] setting ACLs on readonly mounted NFS filesystems (CVE-2005-3623) (Linux Kernel)
  
• ASA-2006-200 - Updated kernel packages available for Red Hat Enterprise Linux 4 (Avaya)
  
• Linux 2.6.14.5 ChangeLog (Linux Kernel)
  
• RHSA-2006:0575-22 - Updated kernel packages available for Red Hat Enterprise Lin (Red Hat)