We received the following report via vendor-sec.
The issue is public.

Date: Tue, 16 Aug 2005 22:04:54 +0200
From: Martin Pitt <martin.pitt@ubuntu.com>
To: Vendor Security <vendor-sec@lst.de>
Subject: [vendor-sec] Fwd: Re: CAN request for kernel priv escalation

Hi!

FYI.

Martin

----- Forwarded message from "Steven M. Christey" <coley@linus.mitre.org> -----

Date: Tue, 16 Aug 2005 13:16:56 -0400 (EDT)
From: "Steven M. Christey" <coley@linus.mitre.org>
To: Martin Pitt <martin.pitt@ubuntu.com>
Cc: cve@mitre.org
Subject: Re: CAN request for kernel priv escalation
X-Spam-Status: No, score=1.1 required=4.0 tests=AWL,BAYES_60 autolearn=no 
	version=3.0.3


On Tue, 16 Aug 2005, Martin Pitt wrote:

> While preparing updated kernels for CAN-2005-2456, Herbert Xu
> discovered that the setting of socket policies was not restricted at
> all:
>
> http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2

Use CAN-2005-2555

======================================================
Candidate: CAN-2005-2555
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2555
Reference: CONFIRM:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2
Reference: CONFIRM:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2

Linux kernel 2.6.x does not properly restrict socket policy access to
users with the CAP_NET_ADMIN capability, which could allow local users
to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2)
ipv6/ipv6_sockglue.c.



- Steve

----- End forwarded message -----

-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org