PT-2006-2527 · Linux · Linux Kernel

Hugh Dickins · Publicado 2006-04-19 · Atualizado 2017-07-20 · CVE-2006-1524

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.16 up to 2.6.16.6

Description: The issue allows local users to bypass IPC permissions and modify readonly tmpfs files by utilizing the madvise remove functionality in the Linux kernel, which does not properly follow file and mmap restrictions.

Recommendations: For Linux kernel versions 2.6.16 up to 2.6.16.6, update to a version that includes the fix for this issue to prevent exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2006-1524

DSA-1097-1

DSA-1103

Produtos afetados

Linux Kernel

Referências · 18

• http://vupen.com/english/advisories/2006/2554 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1103 · Aviso do Fabricante
• http://secunia.com/advisories/20671 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1391 · Aviso do Fabricante
• http://osvdb.org/24714 · Nota
• http://secunia.com/advisories/19664 · Aviso do Fabricante
• http://secunia.com/advisories/19735 · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6 · Nota
• http://debian.org/security/2006/dsa-1097 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1524 · Nota de Segurança
• http://secunia.com/advisories/20398 · Aviso do Fabricante
• http://secunia.com/advisories/19657 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25870 · Nota
• http://novell.com/linux/security/advisories/2006-05-31.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1475 · Aviso do Fabricante