CVE-2010-0729
Advisory lineage Upstream: 0 Downstream: 1
Downstream
Modified
Published: 16 Mar 2010, 19:00
Last modified:07 Aug 2024, 00:59
Vulnerability Summary
Overall Risk (default)
medium
28/100 CVSS Score
6.9 MEDIUM
v2.0 (nvd)
EPSS Score
0.05% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
16 Mar 2010, 19:00
Published
Vulnerability first disclosed
07 Aug 2024, 00:59
Last Modified
Vulnerability information updated
Description
A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a missing ptrace_check_attach call.
CVSS Metrics
- v2.0•MEDIUM•Score: 6.9AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS Trends
Current EPSS score: 0.05%• Percentile: 15%
Techniques & Countermeasures
- CWE-264•Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Affected Systems
- redhat•enterprise_linux
4
References (6)
- http://www.openwall.com/lists/oss-security/2010/03/12/2
- http://www.securityfocus.com/bid/38702
- http://www.redhat.com/support/errata/RHSA-2010-0394.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8687
- https://bugzilla.redhat.com/show_bug.cgi?id=572007
- http://support.avaya.com/css/P8/documents/100090459