The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu | x_refsource_MISC |
| https://bugs.busybox.net/show_bug.cgi?id=7652 | x_refsource_CONFIRM |
| http://openwall.com/lists/oss-security/2015/01/24/4 | mailing-list x_refsource_MLIST |
| https://security.gentoo.org/glsa/201503-13 | vendor-advisory x_refsource_GENTOO |
| http://www.securityfocus.com/bid/72324 | vdb-entry x_refsource_BID |
| https://bugzilla.redhat.com/show_bug.cgi?id=1185707 | x_refsource_CONFIRM |
| https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html | mailing-list x_refsource_MLIST |
| http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b | x_refsource_CONFIRM |
| https://usn.ubuntu.com/3935-1/ | vendor-advisory x_refsource_UBUNTU |
| http://seclists.org/fulldisclosure/2020/Mar/15 | mailing-list x_refsource_FULLDISC |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu | x_refsource_MISC x_transferred |
| https://bugs.busybox.net/show_bug.cgi?id=7652 | x_refsource_CONFIRM x_transferred |
| http://openwall.com/lists/oss-security/2015/01/24/4 | mailing-list x_refsource_MLIST x_transferred |
| https://security.gentoo.org/glsa/201503-13 | vendor-advisory x_refsource_GENTOO x_transferred |
| http://www.securityfocus.com/bid/72324 | vdb-entry x_refsource_BID x_transferred |
| https://bugzilla.redhat.com/show_bug.cgi?id=1185707 | x_refsource_CONFIRM x_transferred |
| https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html | mailing-list x_refsource_MLIST x_transferred |
| http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b | x_refsource_CONFIRM x_transferred |
| https://usn.ubuntu.com/3935-1/ | vendor-advisory x_refsource_UBUNTU x_transferred |
| http://seclists.org/fulldisclosure/2020/Mar/15 | mailing-list x_refsource_FULLDISC x_transferred |