Linux Kernel "CAP_NET_ADMIN" Unauthorized Access Vulnerability

Release date:
Updated on:

Affected Systems:
Debian Linux 5.0 x
Linux kernel 2.6.x
Linux kernel 2.4.x
Ubuntu Linux 9.x
Ubuntu Linux 8.x
Ubuntu Linux 6.x
Ubuntu Linux 11.x
Ubuntu Linux 10.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47792
Cve id: CVE-2011-1019

Linux Kernel is the Kernel of the Linux operating system.

Linux Kernel has an unauthorized access vulnerability in the implementation of CAP_NET_ADMIN. A process with the "CAP_SYS_MODULE" or "CAP_NET_ADMIN" permission can allow remote attackers to exploit this vulnerability to load arbitrary modules on affected computers.

<* Source: Eugene Teo (eugeneteo@eugeneteo.net)

Link: https://bugzilla.redhat.com/show_bug.cgi? Id = 680360
Http://www.ubuntu.com/usn/usn-1141-1/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/