Package: linux-2.6
Version: 2.6.22-4
Severity: important
Tags: security

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for linux-2.6.

CVE-2007-4308[0]:
| The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI
| layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do
| not check permissions for ioctls, which might allow local users to
| cause a denial of service or gain privileges.

If you fix this vulnerability please also include the CVE id
in your changelog entry.

For further information:
[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308

Kind regards
Nico

-- 
Nico Golde - http://ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpM0xqkgkCOK.pgp
Description: PGP signature

Reply via email to