RETIRED: Linux Kernel 'net/l2tp/l2tp_ppp.c' Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	68768
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 16 2014 12:00AM
Updated:	Jul 22 2014 12:08AM
Credit:	Sasha Levin
Vulnerable:	Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Linux kernel
Not Vulnerable:

RETIRED: Linux Kernel 'net/l2tp/l2tp_ppp.c' Multiple Local Privilege Escalation Vulnerabilities

The Linux kernel is prone to is prone to multiple local privilege-escalation vulnerabilities.

Local attackers may exploit these issues to gain elevated privileges or cause a kernel crash.

NOTE: This BID is being retired as it is a duplicate of BID 68683 (Linux Kernel '/net/l2tp/l2tp_ppp.c' File Multiple Local Privilege Escalation Vulnerabilities).

RETIRED: Linux Kernel 'net/l2tp/l2tp_ppp.c' Multiple Local Privilege Escalation Vulnerabilities

An attacker can exploit these issues through readily available tools.

RETIRED: Linux Kernel 'net/l2tp/l2tp_ppp.c' Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Linux Kernel 'net/l2tp/l2tp_ppp.c' Multiple Local Privilege Escalation Vulnerabilities

References:

• Linux Homepage (Linux)
  
• Linux kernel Homepage (kernel.org)