CVE ID:	CVE-2009-2904
Description:	A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.
Test IDs:	1.3.6.1.4.1.25623.1.0.880746   1.3.6.1.4.1.25623.1.0.66170   1.3.6.1.4.1.25623.1.0.122432   1.3.6.1.4.1.25623.1.0.861813   1.3.6.1.4.1.25623.1.0.64992   1.3.6.1.4.1.25623.1.0.67177
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2904 36552 http://www.securityfocus.com/bid/36552 38794 http://secunia.com/advisories/38794 38834 http://secunia.com/advisories/38834 39182 http://secunia.com/advisories/39182 58495 http://osvdb.org/58495 ADV-2010-0528 http://www.vupen.com/english/advisories/2010/0528 FEDORA-2010-5429 http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html RHSA-2009:1470 https://rhn.redhat.com/errata/RHSA-2009-1470.html [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates http://lists.vmware.com/pipermail/security-announce/2010/000082.html https://bugzilla.redhat.com/show_bug.cgi?id=522141 https://bugzilla.redhat.com/show_bug.cgi?id=522141 oval:org.mitre.oval:def:9862 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862