PT-2006-6931 · Linux+1 · Linux Kernel+1

Publicado 2006-12-14 · Atualizado 2017-10-11 · CVE-2006-6304

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.19

Description The issue arises from the do coredump function in fs/exec.c, which sets the flag variable to O EXCL but does not utilize it. This oversight enables context-dependent attackers to modify arbitrary files through a rewrite attack during the core dump process.

Recommendations For Linux kernel version 2.6.19, consider applying a patch that properly utilizes the flag variable set by the do coredump function to prevent arbitrary file modifications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-6304

RHSA-2010:0046

RHSA-2010_0046

Produtos afetados

Linux Kernel

Red Hat

Referências · 38

• https://access.redhat.com/security/cve/CVE-2009-4020 · Nota
• https://access.redhat.com/security/cve/CVE-2009-4272 · Nota
• http://secunia.com/advisories/23349 · Aviso do Fabricante
• http://trustix.org/errata/2006/0074 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2009-3556 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=526068 · Nota
• https://access.redhat.com/security/cve/CVE-2009-2910 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0252.html · Nota
• http://vupen.com/english/advisories/2006/5002 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-6304 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6304 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05250 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06111 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2010-0095.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-06109 · Nota de Segurança