NuytsTech Security

CVE-2007-3848

by ·

Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-controlled parent process death signal (PR_SET_PDEATHSIG).

Date published : 2007-08-14

http://www.securityfocus.com/bid/25387

http://www.securityfocus.com/archive/1/476464/100/0/threaded

Tags: