CVE-2009-3939 Misconfiguration in n/a
Local attackers can modify the megaraid_sas driver I/O mode due to world-writable permissions, potentially leading to privilege escalation or data modification.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-3939?
CVE-2009-3939 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 16 Nov 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
Weakness: CWE-732
Which versions are affected by CVE-2009-3939?
It affects 18 products.
Products include Avaya Aura Application Enablement Services, Avaya Aura Communication Manager, Avaya Aura Session Manager, Avaya Aura Sip Enablement Services, Avaya Aura System Manager, Avaya Aura System Platform and 12 more.
How do I fix CVE-2009-3939?
Apply the vendor's patch.
Is CVE-2009-3939 being exploited?
There is no known exploitation of CVE-2009-3939 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as GHSA-3v99-jwxg-37h6.