The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN ca…

Exploit prediction (EPSS)

0.53% probability of exploitation in the next 30 days, higher than 45% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-264 Permissions, Privileges, and Access Controls

Technology feeds

Linux kernel (RSS, critical only)

References

• lists.opensuse.org /opensuse-security-announce/2008-10/msg00000.html · vendor-advisory, x_refsource_SUSE, x_transferred
• git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f2455eb176ac87081bbfc9a44b21c7c · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/2714 · vdb-entry, x_refsource_VUPEN, x_transferred
• debian.org /security/2008/dsa-1655 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• secunia.com /advisories/32393 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/32237 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• openwall.com /lists/oss-security/2008/08/29/2 · mailing-list, x_refsource_MLIST, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:223 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-10/msg00008.html · vendor-advisory, x_refsource_SUSE, x_transferred
• kernel.org /pub/linux/kernel/v2.4/ChangeLog-2.4.36.7 · x_refsource_CONFIRM, x_transferred
• ubuntu.com /usn/usn-659-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-10/msg00010.html · vendor-advisory, x_refsource_SUSE, x_transferred
• redhat.com /archives/fedora-package-announce/2008-October/msg00693.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• secunia.com /advisories/32103 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/33280 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2008/dsa-1653 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• secunia.com /advisories/32356 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/32759 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:220 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• securitytracker.com /id?1020969 · vdb-entry, x_refsource_SECTRACK, x_transferred
• vupen.com /english/advisories/2008/2511 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/32370 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• redhat.com /support/errata/RHSA-2008-0973.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• redhat.com /support/errata/RHSA-2008-0787.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-10/msg00007.html · vendor-advisory, x_refsource_SUSE, x_transferred
• secunia.com /advisories/32386 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• redhat.com /archives/fedora-package-announce/2008-October/msg00689.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9364 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-10/msg00003.html · vendor-advisory, x_refsource_SUSE, x_transferred
• lists.opensuse.org /opensuse-security-announce/2008-11/msg00001.html · vendor-advisory, x_refsource_SUSE, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5671 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• secunia.com /advisories/33201 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/32315 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

• CVE List: CVE-2008-3525
• NVD: CVE-2008-3525

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.