Linux: two critical bugs found in udev subsystem code

14th May 2009

udev is the subsystem code of Linux similar to Windows Devices Manager by the functionality. Recently, two serious vulnerabilities have been found in it.
The former of them enables a local attacker to gain root privileges by sending to udev a specially designed netlink-message asking for the creation of accessible to all users /dev file, duplicating the existing block device (for example, the root file system sector)/ The other vulnerability concerns integer overflow in the utility for transferring control commands to udev. It allows transmitting specially designed cases and, thus, cause a denial of serving the udev subsystem and theoretically implement its own code with higher privileges.
These two vulnerabilities are confirmed in all supported versions of Debian, Fedora and Ubuntu.

Hard terms of WiiWare

Microsoft began developing Windows 8

Featured

Tipard Mod Converter Mate

Tipard Mod Converter Mate including Mod Converter and DVD Ripper. One part of this best Mod Converter Mate can rip DVD to all p... Excel Document Protector

Encrypt your excel document,support xls,csv,xlw,xlsx;Protect the distribution of your excel
document,No editing,No copying... PPT2EXE Packer

Encrypt your ppt document,support ppt,pptx,pps,ppsx;Protect the distribution of your ppt
document,No editing,No copying,No... Fast Green DWG Viewer

Fast and green viewer for viewing and printing AutoCAD DWG & DXF, HPGL, SVG and CGM files. The viewer also supports to conv... Text Speaker

Text Speaker reads any document aloud in a human voice. Listen to ebooks, reports, email, and web pages on your PC, or turn you...

Interact

Now downloading

iToolSoft Blu-Ray DVD Ripper

iToolSoft Blu-Ray DVD Ripper is a professional tool for users that combines the features of Blu-Ray ...

Blog categories

News blog