PT-2006-1129 · Linux+2 · Netfilter+3

Marcel Holtmann

+1

·

Published

2006-03-22

·

Updated

2023-02-13

·

CVE-2006-0038

CVSS v2.0

6.9

Medium

VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.6.16-rc3
Description: The issue is related to an integer overflow in the do replace function in netfilter for Linux. This can be exploited by local users with CAP NET ADMIN rights to cause a buffer overflow in the copy from user function, particularly when using virtualization solutions such as OpenVZ.
Recommendations: For Linux versions prior to 2.6.16-rc3, update to version 2.6.16-rc3 or later to resolve the issue. As a temporary workaround, consider restricting the use of CAP NET ADMIN rights to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2006-0038
DSA-1097-1
DSA-1103
RHSA-2006:0575
RHSA-2006_0575

Affected Products

Linux
Openvz
Red Hat
Netfilter