|Main Archive Page > Month Archives > oss-security archives|
While not as bad as CVE-2010-4661 (unprivileged module loading)
I'd like to get a CVE assigned for this issue for tracking purposes:
Basically "ifconfig $module" will load any module as long as the process
has CAP_NET_ADMIN (ignoring CAP_SYS_MODULE).
-- Kees Cook Ubuntu Security Team