PT-2006-4343 · Linux+1 · Linux Kernel+3

James Mckenzie · Publicado 2006-07-18 · Atualizado 2018-10-30 · CVE-2006-3468

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x

Description The issue allows remote attackers to cause a denial of service, resulting in a file system panic. This occurs when a crafted UDP packet with a V2 lookup procedure specifies a bad file handle, triggering an error that causes an exported directory to be remounted read-only. The attack is possible when both NFS and EXT3 are used.

Recommendations For Linux kernel version 2.6.x, consider restricting access to the NFS service until a fix is available, and avoid using the V2 lookup procedure with untrusted input to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-3468

DSA-1184-2

RHSA-2006:0617

RHSA-2006_0617

Produtos afetados

Ext3

Linux Kernel

Nfs

Red Hat

Referências · 103

• 🔥 https://exploit-db.com/exploits/28358 · Exploit
• https://bdu.fstec.ru/vul/2015-04846 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04824 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04858 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2006-0617.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04842 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04852 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2006-2936 · Nota
• http://secunia.com/advisories/21847 · Nota
• https://bdu.fstec.ru/vul/2015-04850 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04886 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04836 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2006-1858 · Nota
• https://bdu.fstec.ru/vul/2015-04870 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04834 · Nota de Segurança