Linux insmod Vulnerability

Bugtraq ID:	356
Class:	Origin Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Mar 30 1999 12:00AM
Updated:	Mar 30 1999 12:00AM
Credit:	First posted to BugTraq by Brian Szymanski <[email protected]> on March 30, 1999.
Vulnerable:	SuSE Linux 6.0 SuSE Linux 5.3 SuSE Linux 5.2 Slackware Linux 4.0 Slackware Linux 3.6 Slackware Linux 3.5 Slackware Linux 3.4 Slackware Linux 3.3 Slackware Linux 3.2 Redhat Linux 5.2 i386 Redhat Linux 5.1 - Standard & Poors ComStock 4.2.4 Debian Linux 2.0 r5 Debian Linux 2.0 Debian Linux 1.3.1 Caldera OpenLinux Standard 1.2 Caldera OpenLinux Standard 1.1 Caldera OpenLinux Standard 1.0
Not Vulnerable:

Linux insmod Vulnerability

The insmod binary from before the 2.2.6pre6 modutils package has a serious vulnerability involving ownership. Linux insmod does not check to see whether root owns a particular module or not, when referenced without a full path. This could allow an intruder to possibly run malicious code as a module in kernel mode.

Linux insmod Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Linux insmod Vulnerability

Solution:
The fixed modutils package is available at:

http://www.pi.se/blox/modutils/modutils-2.2.2-pre6.tar.gz.

Linux insmod Vulnerability

References: