CVE-2009-2904 Information

Description

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8 as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11 allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory related to requirements for directory ownership.

Reference

http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://osvdb.org/58495 http://secunia.com/advisories/38794 http://secunia.com/advisories/38834 http://secunia.com/advisories/39182 http://www.securityfocus.com/bid/36552 http://www.vupen.com/english/advisories/2010/0528 https://bugzilla.redhat.com/show_bug.cgi?id=522141 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A9862 https://rhn.redhat.com/errata/RHSA-2009-1470.html