Vasiliy Kulikov
78b7987676
netfilter: ip_tables: fix infoleak to userspace
...
Structures ipt_replace, compat_ipt_replace, and xt_get_revision are
copied from userspace. Fields of these structs that are
zero-terminated strings are not checked. When they are used as argument
to a format string containing "%s" in request_module(), some sensitive
information is leaked to userspace via argument of spawned modprobe
process.
The first and the third bugs were introduced before the git epoch; the
second was introduced in 2722971c (v2.6.17-rc1). To trigger the bug
one should have CAP_NET_ADMIN.
Signed-off-by: Vasiliy Kulikov <segoon@openwall.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2011-03-15 13:36:05 +01:00
..
2011-03-15 13:36:05 +01:00
2010-11-17 12:27:45 -08:00
2011-01-11 14:03:10 -08:00
2011-01-10 16:10:37 -08:00
2010-10-18 11:03:14 +02:00
2010-09-23 14:33:39 -07:00
2010-12-12 22:08:17 -08:00
2010-12-10 14:43:59 -08:00
2010-12-26 22:37:05 -08:00
2010-10-28 10:27:03 -07:00
2010-11-04 12:05:32 -07:00
2011-01-14 13:36:42 +01:00
2011-01-14 14:12:37 +01:00
2010-11-21 10:04:04 -08:00
2010-10-25 13:09:45 -07:00
2010-11-19 13:13:47 -08:00
2010-11-18 11:02:23 -08:00
2011-01-11 14:03:07 -08:00
2011-01-09 16:25:03 -08:00
2010-07-12 12:57:54 -07:00
2010-11-28 18:18:44 -08:00
2009-11-23 10:41:23 -08:00
2010-03-30 22:02:32 +09:00
2010-12-01 17:28:18 -08:00
2010-06-10 23:31:35 -07:00
2011-01-06 11:21:30 -08:00
2010-12-12 22:08:17 -08:00
2011-01-14 13:36:42 +01:00
2010-09-19 12:42:34 -07:00
2010-12-12 22:08:17 -08:00
2010-10-25 14:18:28 -07:00
2010-02-22 16:20:22 -08:00
2010-11-28 10:47:17 -08:00
2010-12-01 12:53:23 -08:00
2010-11-17 12:27:45 -08:00
2011-01-19 23:51:37 +01:00
2010-08-21 23:05:39 -07:00
2010-11-17 12:27:45 -08:00
2010-12-08 12:16:33 -08:00
2010-10-27 11:37:31 -07:00
2010-11-17 12:27:45 -08:00
2011-01-14 14:12:37 +01:00
2010-11-17 12:27:45 -08:00
2010-12-13 12:16:14 -08:00
2010-08-27 19:31:56 -07:00
2009-12-03 16:06:13 -08:00
2009-11-23 10:41:23 -08:00
2010-06-02 07:15:48 -07:00
2010-10-18 11:03:14 +02:00
2010-12-23 09:54:26 -08:00
2010-12-26 22:37:05 -08:00
2009-11-23 10:41:23 -08:00
2010-12-08 13:47:38 -08:00
2011-01-13 10:05:56 -08:00
2010-11-17 12:27:46 -08:00
2010-10-17 13:46:33 -07:00
2010-10-18 11:03:14 +02:00
2010-09-23 14:33:39 -07:00
2009-11-23 10:41:23 -08:00
2010-12-08 13:47:38 -08:00
2010-10-27 11:37:32 -07:00
2010-12-17 12:27:22 -08:00
2010-12-16 14:26:56 -08:00
2010-07-12 12:57:54 -07:00
2010-12-12 22:08:17 -08:00
2010-03-25 16:00:30 +01:00
2010-11-17 12:27:45 -08:00
2010-09-20 11:11:38 -07:00
2010-08-30 13:50:45 -07:00