>> Linux Kernel "pppol2tp_recvmsg()" Memory Corruption Vulnerability
Title : Linux Kernel "pppol2tp_recvmsg()" Memory Corruption Vulnerability VUPEN ID : VUPEN/ADV-2008-1854 CVE ID : CVE-2008-2750 CWE ID : CWE-19
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-06-17
Technical Description
A vulnerability has been identified in Linux Kernel, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system. This issue is caused by a memory corruption error in the "pppol2tp_recvmsg()" [drivers/net/pppol2tp.c] function when processing user-supplied data, which could be exploited by attackers to crash an affected system or execute arbitrary code with kernel privileges.
