NVD

Id
60052  
Name
CVE-2006-1343  
Description
net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-03-21  
Modified Date
2016-10-17  
Seq
2006-1343  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
309097 60052 CVE-2006-1343 [linux-netdev] 20060304 BUG: Small information leak in SO_ORIGINAL_DST (2.4 and 2.6) and  View
309098 60052 CVE-2006-1343 oval:org.mitre.oval:def:10875  View
309099 60052 CVE-2006-1343 http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm  View
309100 60052 CVE-2006-1343 http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm  View
309101 60052 CVE-2006-1343 DSA-1097  View
309102 60052 CVE-2006-1343 DSA-1184  View
309103 60052 CVE-2006-1343 MDKSA-2006:123  View
309104 60052 CVE-2006-1343 MDKSA-2006:150  View
309105 60052 CVE-2006-1343 RHSA-2006:0437  View
309106 60052 CVE-2006-1343 RHSA-2006:0575  View
309107 60052 CVE-2006-1343 RHSA-2006:0579  View
309108 60052 CVE-2006-1343 RHSA-2006:0580  View
309109 60052 CVE-2006-1343 20060531 rPSA-2006-0087-1 kernel  View
309110 60052 CVE-2006-1343 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4  View
309111 60052 CVE-2006-1343 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2  View
309112 60052 CVE-2006-1343 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1  View
309113 60052 CVE-2006-1343 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2  View
309114 60052 CVE-2006-1343 17203  View
309115 60052 CVE-2006-1343 2006-0032  View
309116 60052 CVE-2006-1343 USN-281-1  View
309117 60052 CVE-2006-1343 http://www.vmware.com/download/esx/esx-202-200610-patch.html  View
309118 60052 CVE-2006-1343 http://www.vmware.com/download/esx/esx-213-200610-patch.html  View
309119 60052 CVE-2006-1343 http://www.vmware.com/download/esx/esx-254-200610-patch.html  View
309120 60052 CVE-2006-1343 ADV-2006-2071  View
309121 60052 CVE-2006-1343 ADV-2006-4502  View
309122 60052 CVE-2006-1343 linux-sockaddr-memory-leak(25425)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57950 JVNDB-2006-000146 Linux Kernel の getsockopt() 関数にカーネルメモリデータが漏洩する脆弱性 ------------ CVE-2006-1343 17445 CVE-2006-1343 60052 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000146.html 2006-03-23 2007-04-01 View