uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode.Referenceshttp://www.iss.net/security_center/static/11276.phphttp://www.kb.cert.org/vuls/id/134025http://www.ciac.org/ciac/bulletins/n-044.shtmlhttp://www.redhat.com/support/errata/RHSA-2003-056.htmlhttp://www.securityfocus.com/bid/6801
