Linux Kernel ebtables Security Bypass

Secunia ID	SA38133
CVE-ID	CVE-2010-0007
Release Date	13 Jan 2010
Last Change	19 Jan 2010
Criticality	Less Critical
Solution Status	Vendor Patch
Where	Local system
Impact	Security Bypass This covers vulnerabilities or security issues where malicious users or people can bypass certain security mechanisms of the application. The actual impact varies significantly depending on the design and purpose of the affected application.
Description	A security issue has been reported in the Linux Kernel, which can be exploited by malicious, local users to bypass certain security restrictions. The security issue is caused due to the "do_ebt_set_ctl()" and "do_ebt_get_ctl()" functions in net/bridge/netfilter/ebtables.c not properly restricting access to users with the "CAP_NET_ADMIN" capability, which can be exploited to e.g. set and modify ebtables rules without having the proper capability.
Solution	Update to version 2.6.27.44, 2.6.31.12, or 2.6.32.4.
Reported by	Florian Westphal
Original Advisory	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=dce766af541f6605fa9889892c0280bab31c66ab