CVE-2009-2904

CVE-2009-2904 describes a privilege escalation vulnerability in a Red Hat modification to OpenSSH 4.8's ChrootDirectory feature, specifically affecting OpenSSH 4.3 in Red Hat Enterprise Linux 5.4 and Fedora 11. Local users can exploit this by creating hard links to setuid programs within the chroot directory, leveraging improper directory ownership requirements. With a CVSS score of 6.9, this vulnerability has a local attack vector and medium attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.