Bug#295146: kernel: can delete root directories

[Rehm <jagginess@yahoo.ca>]

Package: kernel
Severity: critical
Justification: root security hole

Extremely insecure. Apparently after having been able to do mounting
on a diskimage disk1.img (sued to root under lightweight wm in X- xterm box) on a directory called ./1,
drwxr-xr-x  2 root  root     4096 2005-02-13 18:22 1
$
->as a normal user, (and my groups command shows no respect of being
member of root), I am able to delete directory 1, or shouldn't I? Either
I'm very dumb, or something is terribly wrong..Any other further details I can provide and test- I wouldn't
mind..Thanks for the feedback..

jagg

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)