PT-2006-1129 · Linux+2 · Netfilter+3

Marcel Holtmann

+1

·

Publicado

2006-03-22

·

Atualizado

2023-02-13

·

CVE-2006-0038

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.6.16-rc3
Description: The issue is related to an integer overflow in the do replace function in netfilter for Linux. This can be exploited by local users with CAP NET ADMIN rights to cause a buffer overflow in the copy from user function, particularly when using virtualization solutions such as OpenVZ.
Recommendations: For Linux versions prior to 2.6.16-rc3, update to version 2.6.16-rc3 or later to resolve the issue. As a temporary workaround, consider restricting the use of CAP NET ADMIN rights to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2006-0038
DSA-1097-1
DSA-1103
RHSA-2006:0575
RHSA-2006_0575

Produtos afetados

Linux
Openvz
Red Hat
Netfilter