CVE-2010-3850

Upstream information

CVE-2010-3850 at MITRE

Description

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

---

SUSE information

CVSS v2 Scores

	National Vulnerability Database
Base Score	4.94
Vector	AV:L/AC:L/Au:N/C:N/I:C/A:N
Access Vector	Local
Access Complexity	Low
Authentication	None
Confidentiality Impact	None
Integrity Impact	Complete
Availability Impact	None

Note from the SUSE Security Team

The ECONET module is not enabled in SUSE Linux Enterprise 11 SP1, openSUSE 11.2 and 11.3. Older products are affected by this problem and will receive fixes.

SUSE Bugzilla entries: 647632 [RESOLVED / FIXED], 658461 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SA:2011:005, published Tue, 25 Jan 2011 11:00:00 +0000
• SUSE-SA:2011:007, published Mon, 07 Feb 2011 09:00:00 +0000
• SUSE-SA:2011:008, published Fri, 11 Feb 2011 12:00:00 +0000
• SUSE-SA:2011:017, published Mon, 18 Apr 2011 11:00:00 +0000
• SUSE-SA:2011:020, published Thu, 28 Apr 2011 11:00:00 +0000
• openSUSE-SU-2011:0346-1, published Fri, 15 Apr 2011 22:02:25 +0200 (CEST)
• openSUSE-SU-2011:0399-1, published Thu, 28 Apr 2011 04:08:10 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Real Time Extension 11 SP1	brocade-bna-kmp-rt >= 2.1.0.0_2.6.33.7.2_rt30_0.3-0.2.9 iscsitarget-kmp-rt >= 1.4.19_2.6.33.7.2_rt30_0.3-0.7.26 kernel-rt >= 2.6.33.7.2-0.3.1 kernel-rt-base >= 2.6.33.7.2-0.3.1 kernel-rt-devel >= 2.6.33.7.2-0.3.1 kernel-rt_trace >= 2.6.33.7.2-0.3.1 kernel-rt_trace-base >= 2.6.33.7.2-0.3.1 kernel-rt_trace-devel >= 2.6.33.7.2-0.3.1 kernel-source-rt >= 2.6.33.7.2-0.3.1 kernel-syms-rt >= 2.6.33.7.2-0.3.1 ofed-kmp-rt >= 1.4.2_2.6.33.7.2_rt30_0.3-0.14.1	Patchnames: slertesp1-kernel
SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit	kernel-default >= 2.6.16.60-0.42.11 kernel-source >= 2.6.16.60-0.42.11 kernel-syms >= 2.6.16.60-0.42.11	sles10-sp2-ltss.s390x ZYPP Patch Nr: 7538
openSUSE 11.2	kernel-debug-base-debuginfo >= 2.6.31.14-0.8.1 kernel-debug-debuginfo >= 2.6.31.14-0.8.1 kernel-debug-debugsource >= 2.6.31.14-0.8.1 kernel-debug-devel-debuginfo >= 2.6.31.14-0.8.1 kernel-default-base-debuginfo >= 2.6.31.14-0.8.1 kernel-default-debuginfo >= 2.6.31.14-0.8.1 kernel-default-debugsource >= 2.6.31.14-0.8.1 kernel-default-devel-debuginfo >= 2.6.31.14-0.8.1 kernel-desktop-base-debuginfo >= 2.6.31.14-0.8.1 kernel-desktop-debuginfo >= 2.6.31.14-0.8.1 kernel-desktop-debugsource >= 2.6.31.14-0.8.1 kernel-desktop-devel-debuginfo >= 2.6.31.14-0.8.1 kernel-pae-base-debuginfo >= 2.6.31.14-0.8.1 kernel-pae-debuginfo >= 2.6.31.14-0.8.1 kernel-pae-debugsource >= 2.6.31.14-0.8.1 kernel-pae-devel-debuginfo >= 2.6.31.14-0.8.1 kernel-trace-base-debuginfo >= 2.6.31.14-0.8.1 kernel-trace-debuginfo >= 2.6.31.14-0.8.1 kernel-trace-debugsource >= 2.6.31.14-0.8.1 kernel-trace-devel-debuginfo >= 2.6.31.14-0.8.1 kernel-vanilla-base-debuginfo >= 2.6.31.14-0.8.1 kernel-vanilla-debuginfo >= 2.6.31.14-0.8.1 kernel-vanilla-debugsource >= 2.6.31.14-0.8.1 kernel-vanilla-devel-debuginfo >= 2.6.31.14-0.8.1 kernel-xen-base-debuginfo >= 2.6.31.14-0.8.1 kernel-xen-debuginfo >= 2.6.31.14-0.8.1 kernel-xen-debugsource >= 2.6.31.14-0.8.1 kernel-xen-devel-debuginfo >= 2.6.31.14-0.8.1 preload-kmp-default-debuginfo >= 1.1_2.6.31.14_0.8-6.9.49 preload-kmp-desktop-debuginfo >= 1.1_2.6.31.14_0.8-6.9.49
openSUSE 11.2	kernel-debug >= 2.6.31.14-0.8.1 kernel-debug-base >= 2.6.31.14-0.8.1 kernel-debug-devel >= 2.6.31.14-0.8.1 kernel-default >= 2.6.31.14-0.8.1 kernel-default-base >= 2.6.31.14-0.8.1 kernel-default-devel >= 2.6.31.14-0.8.1 kernel-desktop >= 2.6.31.14-0.8.1 kernel-desktop-base >= 2.6.31.14-0.8.1 kernel-desktop-devel >= 2.6.31.14-0.8.1 kernel-pae >= 2.6.31.14-0.8.1 kernel-pae-base >= 2.6.31.14-0.8.1 kernel-pae-devel >= 2.6.31.14-0.8.1 kernel-source >= 2.6.31.14-0.8.1 kernel-source-vanilla >= 2.6.31.14-0.8.1 kernel-syms >= 2.6.31.14-0.8.1 kernel-trace >= 2.6.31.14-0.8.1 kernel-trace-base >= 2.6.31.14-0.8.1 kernel-trace-devel >= 2.6.31.14-0.8.1 kernel-vanilla >= 2.6.31.14-0.8.1 kernel-vanilla-base >= 2.6.31.14-0.8.1 kernel-vanilla-devel >= 2.6.31.14-0.8.1 kernel-xen >= 2.6.31.14-0.8.1 kernel-xen-base >= 2.6.31.14-0.8.1 kernel-xen-devel >= 2.6.31.14-0.8.1 preload-kmp-default >= 1.1_2.6.31.14_0.8-6.9.49 preload-kmp-desktop >= 1.1_2.6.31.14_0.8-6.9.49
Open Enterprise Server	kernel-bigsmp >= 2.6.5-7.325 kernel-debug >= 2.6.5-7.325 kernel-default >= 2.6.5-7.325 kernel-smp >= 2.6.5-7.325 kernel-source >= 2.6.5-7.325 kernel-syms >= 2.6.5-7.325 kernel-um >= 2.6.5-7.325 kernel-xen >= 2.6.5-7.325 kernel-xenpae >= 2.6.5-7.325 um-host-install-initrd >= 1.0-48.38 um-host-kernel >= 2.6.5-7.325 xen-kmp >= 3.0.4_2.6.5_7.325-0.2	sles9-oes.x86 YOU Patch Nr: 12678
SUSE Linux Enterprise Server 10 SP2 for x86	kernel-bigsmp >= 2.6.16.60-0.42.11 kernel-debug >= 2.6.16.60-0.42.11 kernel-default >= 2.6.16.60-0.42.11 kernel-kdump >= 2.6.16.60-0.42.11 kernel-smp >= 2.6.16.60-0.42.11 kernel-source >= 2.6.16.60-0.42.11 kernel-syms >= 2.6.16.60-0.42.11 kernel-vmi >= 2.6.16.60-0.42.11 kernel-vmipae >= 2.6.16.60-0.42.11 kernel-xen >= 2.6.16.60-0.42.11 kernel-xenpae >= 2.6.16.60-0.42.11	sles10-sp2-ltss.x86 ZYPP Patch Nr: 7537
SUSE Linux Enterprise Desktop 10 SP3 for x86	kernel-bigsmp >= 2.6.16.60-0.76.8 kernel-default >= 2.6.16.60-0.76.8 kernel-smp >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8 kernel-xen >= 2.6.16.60-0.76.8 kernel-xenpae >= 2.6.16.60-0.76.8	sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303
SUSE Linux Enterprise SDK 10 SP3	kernel-debug >= 2.6.16.60-0.76.8 kernel-kdump >= 2.6.16.60-0.76.8 kernel-xen >= 2.6.16.60-0.76.8 kernel-xenpae >= 2.6.16.60-0.76.8	sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303
SUSE Linux Enterprise Server 10 SP3	kernel-bigsmp >= 2.6.16.60-0.76.8 kernel-debug >= 2.6.16.60-0.76.8 kernel-default >= 2.6.16.60-0.76.8 kernel-kdump >= 2.6.16.60-0.76.8 kernel-kdumppae >= 2.6.16.60-0.76.8 kernel-smp >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8 kernel-vmi >= 2.6.16.60-0.76.8 kernel-vmipae >= 2.6.16.60-0.76.8 kernel-xen >= 2.6.16.60-0.76.8 kernel-xenpae >= 2.6.16.60-0.76.8	sle10-sp3-sdk.x86 sles10-sp3.x86 sled10-sp3.x86 sles10-sp3-debuginfo.x86 ZYPP Patch Nr: 7303
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T	kernel-debug >= 2.6.16.60-0.42.11 kernel-default >= 2.6.16.60-0.42.11 kernel-kdump >= 2.6.16.60-0.42.11 kernel-smp >= 2.6.16.60-0.42.11 kernel-source >= 2.6.16.60-0.42.11 kernel-syms >= 2.6.16.60-0.42.11 kernel-xen >= 2.6.16.60-0.42.11	sles10-sp2-ltss.x86-64 ZYPP Patch Nr: 7539
SUSE Linux Enterprise Real Time 11 SP1	brocade-bna-kmp-rt >= 2.1.0.0_2.6.33.7.2_rt30_0.3-0.2.9 iscsitarget-kmp-rt >= 1.4.19_2.6.33.7.2_rt30_0.3-0.7.26 kernel-rt >= 2.6.33.7.2-0.3.1 kernel-rt-base >= 2.6.33.7.2-0.3.1 kernel-rt-devel >= 2.6.33.7.2-0.3.1 kernel-rt_trace >= 2.6.33.7.2-0.3.1 kernel-rt_trace-base >= 2.6.33.7.2-0.3.1 kernel-rt_trace-devel >= 2.6.33.7.2-0.3.1 kernel-source-rt >= 2.6.33.7.2-0.3.1 kernel-syms-rt >= 2.6.33.7.2-0.3.1 ofed-kmp-rt >= 1.5.2_2.6.33.7.2_rt30_0.3-0.3.2	Builds SAT Patch Nr: 3859
SUSE Linux Enterprise SDK 10 SP3	kernel-kdump >= 2.6.16.60-0.76.8	sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7310
SUSE Linux Enterprise Server 10 SP3	kernel-default >= 2.6.16.60-0.76.8 kernel-iseries64 >= 2.6.16.60-0.76.8 kernel-kdump >= 2.6.16.60-0.76.8 kernel-ppc64 >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8	sles10-sp3-debuginfo.ppc sle10-sp3-sdk.ppc sles10-sp3.ppc ZYPP Patch Nr: 7310
SUSE Linux Enterprise Server 10 SP3	kernel-default >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8	sles10-sp3.s390x sles10-sp3-debuginfo.s390x ZYPP Patch Nr: 7306
SUSE Linux Enterprise SDK 10 SP3	kernel-debug >= 2.6.16.60-0.76.8	sles10-sp3.ia64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7305
SUSE Linux Enterprise Server 10 SP3	kernel-debug >= 2.6.16.60-0.76.8 kernel-default >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8	sles10-sp3.ia64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ia64 ZYPP Patch Nr: 7305
SUSE Linux Enterprise Server RT Solution 10 for x86	ib-bonding-kmp-rt >= 0.9.0_2.6.22.19_0.43.1-1.22.8 ib-bonding-kmp-rt_bigsmp >= 0.9.0_2.6.22.19_0.43.1-1.22.8 ib-bonding-kmp-rt_debug >= 0.9.0_2.6.22.19_0.43.1-1.22.8 ib-bonding-kmp-rt_timing >= 0.9.0_2.6.22.19_0.43.1-1.22.8 intel-igb >= 1.3.19.3-0.5.8 intel-igb-kmp-rt >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 intel-igb-kmp-rt_bigsmp >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 intel-igb-kmp-rt_debug >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 intel-igb-kmp-rt_timing >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 kernel-rt >= 2.6.22.19-0.43.1 kernel-rt_bigsmp >= 2.6.22.19-0.43.1 kernel-rt_debug >= 2.6.22.19-0.43.1 kernel-rt_timing >= 2.6.22.19-0.43.1 kernel-source >= 2.6.22.19-0.43.1 kernel-syms >= 2.6.22.19-0.43.1 ofed-cxgb3-NIC-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-cxgb3-NIC-kmp-rt_bigsmp >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-cxgb3-NIC-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-cxgb3-NIC-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt_bigsmp >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3	slert10-sp3.x86-64 slert10-sp3.x86 ZYPP Patch Nr: 7444
SUSE Linux Enterprise Server RT Solution 10 for AMD64 and Intel EM64T	ib-bonding-kmp-rt >= 0.9.0_2.6.22.19_0.43.1-1.22.8 ib-bonding-kmp-rt_debug >= 0.9.0_2.6.22.19_0.43.1-1.22.8 ib-bonding-kmp-rt_timing >= 0.9.0_2.6.22.19_0.43.1-1.22.8 intel-igb >= 1.3.19.3-0.5.8 intel-igb-kmp-rt >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 intel-igb-kmp-rt_debug >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 intel-igb-kmp-rt_timing >= 1.3.19.3_2.6.22.19_0.43.1-0.5.8 kernel-rt >= 2.6.22.19-0.43.1 kernel-rt_debug >= 2.6.22.19-0.43.1 kernel-rt_timing >= 2.6.22.19-0.43.1 kernel-source >= 2.6.22.19-0.43.1 kernel-syms >= 2.6.22.19-0.43.1 ofed-cxgb3-NIC-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-cxgb3-NIC-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-cxgb3-NIC-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt_debug >= 1.4.2_2.6.22.19_0.43.1-0.13.3 ofed-kmp-rt_timing >= 1.4.2_2.6.22.19_0.43.1-0.13.3	slert10-sp3.x86-64 slert10-sp3.x86 ZYPP Patch Nr: 7444
openSUSE 11.3	kernel-debug-base-debuginfo >= 2.6.34.8-0.2.1 kernel-debug-debuginfo >= 2.6.34.8-0.2.1 kernel-debug-debugsource >= 2.6.34.8-0.2.1 kernel-debug-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-default-base-debuginfo >= 2.6.34.8-0.2.1 kernel-default-debuginfo >= 2.6.34.8-0.2.1 kernel-default-debugsource >= 2.6.34.8-0.2.1 kernel-default-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-desktop-base-debuginfo >= 2.6.34.8-0.2.1 kernel-desktop-debuginfo >= 2.6.34.8-0.2.1 kernel-desktop-debugsource >= 2.6.34.8-0.2.1 kernel-desktop-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-ec2-base-debuginfo >= 2.6.34.8-0.2.1 kernel-ec2-debuginfo >= 2.6.34.8-0.2.1 kernel-ec2-debugsource >= 2.6.34.8-0.2.1 kernel-ec2-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-ec2-extra-debuginfo >= 2.6.34.8-0.2.1 kernel-pae-base-debuginfo >= 2.6.34.8-0.2.1 kernel-pae-debuginfo >= 2.6.34.8-0.2.1 kernel-pae-debugsource >= 2.6.34.8-0.2.1 kernel-pae-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-trace-base-debuginfo >= 2.6.34.8-0.2.1 kernel-trace-debuginfo >= 2.6.34.8-0.2.1 kernel-trace-debugsource >= 2.6.34.8-0.2.1 kernel-trace-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-vanilla-base-debuginfo >= 2.6.34.8-0.2.1 kernel-vanilla-debuginfo >= 2.6.34.8-0.2.1 kernel-vanilla-debugsource >= 2.6.34.8-0.2.1 kernel-vanilla-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-vmi-base-debuginfo >= 2.6.34.8-0.2.1 kernel-vmi-debuginfo >= 2.6.34.8-0.2.1 kernel-vmi-debugsource >= 2.6.34.8-0.2.1 kernel-vmi-devel-debuginfo >= 2.6.34.8-0.2.1 kernel-xen-base-debuginfo >= 2.6.34.8-0.2.1 kernel-xen-debuginfo >= 2.6.34.8-0.2.1 kernel-xen-debugsource >= 2.6.34.8-0.2.1 kernel-xen-devel-debuginfo >= 2.6.34.8-0.2.1 preload-kmp-default-debuginfo >= 1.1_k2.6.34.8_0.2-19.1.19 preload-kmp-desktop-debuginfo >= 1.1_k2.6.34.8_0.2-19.1.19
openSUSE 11.3	kernel-debug >= 2.6.34.8-0.2.1 kernel-debug-base >= 2.6.34.8-0.2.1 kernel-debug-devel >= 2.6.34.8-0.2.1 kernel-default >= 2.6.34.8-0.2.1 kernel-default-base >= 2.6.34.8-0.2.1 kernel-default-devel >= 2.6.34.8-0.2.1 kernel-desktop >= 2.6.34.8-0.2.1 kernel-desktop-base >= 2.6.34.8-0.2.1 kernel-desktop-devel >= 2.6.34.8-0.2.1 kernel-devel >= 2.6.34.8-0.2.1 kernel-ec2 >= 2.6.34.8-0.2.1 kernel-ec2-base >= 2.6.34.8-0.2.1 kernel-ec2-devel >= 2.6.34.8-0.2.1 kernel-ec2-extra >= 2.6.34.8-0.2.1 kernel-pae >= 2.6.34.8-0.2.1 kernel-pae-base >= 2.6.34.8-0.2.1 kernel-pae-devel >= 2.6.34.8-0.2.1 kernel-source >= 2.6.34.8-0.2.1 kernel-source-vanilla >= 2.6.34.8-0.2.1 kernel-syms >= 2.6.34.8-0.2.1 kernel-trace >= 2.6.34.8-0.2.1 kernel-trace-base >= 2.6.34.8-0.2.1 kernel-trace-devel >= 2.6.34.8-0.2.1 kernel-vanilla >= 2.6.34.8-0.2.1 kernel-vanilla-base >= 2.6.34.8-0.2.1 kernel-vanilla-devel >= 2.6.34.8-0.2.1 kernel-vmi >= 2.6.34.8-0.2.1 kernel-vmi-base >= 2.6.34.8-0.2.1 kernel-vmi-devel >= 2.6.34.8-0.2.1 kernel-xen >= 2.6.34.8-0.2.1 kernel-xen-base >= 2.6.34.8-0.2.1 kernel-xen-devel >= 2.6.34.8-0.2.1 preload-kmp-default >= 1.1_k2.6.34.8_0.2-19.1.19 preload-kmp-desktop >= 1.1_k2.6.34.8_0.2-19.1.19
SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T	kernel-default >= 2.6.16.60-0.76.8 kernel-smp >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8 kernel-xen >= 2.6.16.60-0.76.8	sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304
SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3	kernel-debug >= 2.6.16.60-0.76.8 kernel-default >= 2.6.16.60-0.76.8 kernel-kdump >= 2.6.16.60-0.76.8 kernel-smp >= 2.6.16.60-0.76.8 kernel-source >= 2.6.16.60-0.76.8 kernel-syms >= 2.6.16.60-0.76.8 kernel-xen >= 2.6.16.60-0.76.8	sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304
SUSE Linux Enterprise SDK 10 SP3	kernel-debug >= 2.6.16.60-0.76.8 kernel-kdump >= 2.6.16.60-0.76.8 kernel-xen >= 2.6.16.60-0.76.8	sles10-sp3.x86-64 sled10-sp3.x86-64 sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.x86-64 ZYPP Patch Nr: 7304