>> Linux Kernel "may_open()" Local File Permissions Bypass Vulnerability
Title : Linux Kernel "may_open()" Local File Permissions Bypass Vulnerability VUPEN ID : VUPEN/ADV-2008-0151 CVE ID : CVE-2008-0001
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2008-01-16
Technical Description
A vulnerability has been identified in Linux Kernel, which could be exploited by malicious users to bypass security restrictions. This issue is caused by an error in the "may_open()" [fs/namei.c] function that performs tests of access mode by using the "flag" variable instead of the "acc_mode" variable, which could be exploited by local attackers to bypass file permissions and gain unauthorized access to certain files.
