PT-2006-6931 · Linux+1 · Linux Kernel+1

Published 2006-12-14 · Updated 2017-10-11 · CVE-2006-6304

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.19

Description The issue arises from the do coredump function in fs/exec.c, which sets the flag variable to O EXCL but does not utilize it. This oversight enables context-dependent attackers to modify arbitrary files through a rewrite attack during the core dump process.

Recommendations For Linux kernel version 2.6.19, consider applying a patch that properly utilizes the flag variable set by the do coredump function to prevent arbitrary file modifications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-6304

RHSA-2010:0046

RHSA-2010_0046

Affected Products

Linux Kernel

Red Hat

References · 38

• http://secunia.com/advisories/23349 · Vendor Advisory
• http://trustix.org/errata/2006/0074 · Vendor Advisory
• http://vupen.com/english/advisories/2006/5002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6304 · Security Note
• https://bdu.fstec.ru/vul/2015-05250 · Security Note
• https://bdu.fstec.ru/vul/2015-06111 · Security Note
• https://rhn.redhat.com/errata/RHSA-2010-0095.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06109 · Security Note
• https://bdu.fstec.ru/vul/2015-05251 · Security Note
• https://bdu.fstec.ru/vul/2015-06110 · Security Note
• https://bdu.fstec.ru/vul/2015-06103 · Security Note
• https://bdu.fstec.ru/vul/2015-06106 · Security Note
• http://securityfocus.com/bid/21591 · Patch
• https://rhn.redhat.com/errata/RHSA-2010-0046.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06107 · Security Note