CVE-2008-5393 Security feature bypass in n/a
Remote attackers can bypass isolation mechanisms in Ubuntu Privacy Remix by accessing RAID arrays, compromising data confidentiality and integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-5393?
CVE-2008-5393 is a critical vulnerability in n/a, published on 9 Dec 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays.
Weakness: CWE-264
Which versions are affected by CVE-2008-5393?
It affects 1 product.
Products include Privacy-Cd Unbuntu Privacy Remix.
How do I fix CVE-2008-5393?
No fix has been published for CVE-2008-5393 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-5393 being exploited?
There is no known exploitation of CVE-2008-5393 in the wild and no public exploit code.
Sources
Also known as GHSA-3vh3-h94g-wh9r.