Severity : High Published : 2012-05-17 Modified : 2013-02-14 Base Score : 7.2 Details : The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR. Product/Version : MVL6 Kernel 2.6.29

CVE-2012-4565 CVE-2012-4508 CVE-2012-4444 CVE-2012-4423 CVE-2012-3524 CVE-2012-3511 CVE-2012-3509 CVE-2012-3417 CVE-2012-3401 CVE-2012-3400 CVE-2012-2333 CVE-2012-2319 CVE-2012-2313 CVE-2012-2141 CVE-2012-2131 CVE-2012-2123 CVE-2012-2111 CVE-2012-2110 CVE-2012-2100 CVE-2012-1667 CVE-2012-1182 CVE-2012-1165 CVE-2012-1164 CVE-2012-1146 CVE-2012-1097 CVE-2012-0884 CVE-2012-0879 CVE-2012-0840 CVE-2012-0815 CVE-2012-0814 CVE-2012-0061 CVE-2012-0060 CVE-2012-0053 CVE-2012-0044 CVE-2012-0038 CVE-2012-0031 CVE-2012-0029 CVE-2012-0028 CVE-2012-0027