oss-security - CVE request - kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4C0C4304.1080400@redhat.com>
Date: Mon, 07 Jun 2010 08:53:24 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request - kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite
 append-only files

Using the EXT4_IOC_MOVE_EXT ioctl, it is possible to overwrite the 
contents of an append-only donor file.

http://git.kernel.org/linus/1f5a81e41f8b1a782c68d3843e9ec1bfaadf7d72
https://bugzilla.redhat.com/show_bug.cgi?id=601006

Thanks, Eugene
--
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.