imPC@ndo IT

Tracker / CVE-2009-3939

CVE-2009-3939

High 7.1

The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.

Affected products and versions

avaya aura_application_enablement_services
avaya aura_communication_manager
avaya aura_session_manager
avaya aura_sip_enablement_services
avaya aura_system_manager
avaya aura_system_platform
avaya voice_portal
canonical ubuntu_linux
debian debian_linux
linux linux_kernel · … → 2.6.31.6
opensuse opensuse
redhat enterprise_linux_desktop
redhat enterprise_linux_eus
redhat enterprise_linux_server
redhat enterprise_linux_workstation
redhat virtualization
suse linux_enterprise_desktop
suse linux_enterprise_server

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References