The file watch implementation in the audit subsystem (auditctl -w)...
Vulnerability Description
The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9 allows local users to cause a denial of service (kernel panic) by replacing a watched file, which does not cause the watch on the old inode to be dropped.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0001
Credits & Attribution
No credits recorded in the NVD database.
References
- http://osvdb.org/33031
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9560
- http://secunia.com/advisories/24300
- http://www.redhat.com/support/errata/RHSA-2007-0085.html
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=223129
- http://www.securitytracker.com/id?1017705
- http://www.securityfocus.com/bid/22737
More from redhat
View All →Affected Vendor
redhat
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.