CVE-2010-0007

net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.

🔗 References (60)

• secalert@redhathttp://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dce766af541f6605fa9889892c0280bab31c66ab
• secalert@redhathttp://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html
• secalert@redhathttp://secunia.com/advisories/38133
• secalert@redhathttp://secunia.com/advisories/38296
• secalert@redhathttp://secunia.com/advisories/38333
• secalert@redhathttp://secunia.com/advisories/38492
• secalert@redhathttp://secunia.com/advisories/38779
• secalert@redhathttp://secunia.com/advisories/39033
• secalert@redhathttp://secunia.com/advisories/43315
• secalert@redhathttp://www.debian.org/security/2010/dsa-1996