imPC@ndo IT

Tracker / CVE-2010-2066

CVE-2010-2066

Medium 5.5

The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.

Affected products and versions

canonical ubuntu_linux
linux linux_kernel · … → 2.6.35
suse linux_enterprise_high_availability_extension
suse suse_linux_enterprise_desktop
suse suse_linux_enterprise_server
vmware esx

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References