Thread: Is CVE-2009-1185 relevant for fremantle too
View Single Post
cy8aer is offline cy8aer
2010-08-01 , 10:45
Posts: 281 | Thanked: 679 times | Joined on Feb 2010
#1
http://cve.mitre.org/cgi-bin/cvename...=CVE-2009-1185 describes that it is possible to get root priviledges from user space by tricking udev < 1.4.1.

The PR 1.2 udev is 0.125-7+142.maemo1+0m5 (definitely < 1.4.1??).

So: is it possible to hack the system? Are updates of udev possible? How would Nokia react about generic linux vulnerabilities in future?