NVD

Id
60561  
Name
CVE-2006-1856  
Description
Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-19  
Modified Date
2010-08-21  
Seq
2006-1856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
312371 60561 CVE-2006-1856 [linux-security-module] 20050928 readv/writev syscalls are not checked by lsm  View
312372 60561 CVE-2006-1856 oval:org.mitre.oval:def:9927  View
312373 60561 CVE-2006-1856 http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm  View
312374 60561 CVE-2006-1856 DSA-1184  View
312375 60561 CVE-2006-1856 MDKSA-2006:123  View
312376 60561 CVE-2006-1856 RHSA-2006:0493  View
312377 60561 CVE-2006-1856 18105  View
312378 60561 CVE-2006-1856 USN-302-1  View
312379 60561 CVE-2006-1856 [linux-kernel] 20060426 [PATCH] LSM: add missing hook to do_compat_readv_writev()  View
312380 60561 CVE-2006-1856 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=191524  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57965 JVNDB-2006-000161 Linux Kernel の readv() および writev() システムコールにおけるアクセス制御を回避される脆弱性 ------------ CVE-2006-1856 17958 CVE-2006-1856 60561 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000161.html 2006-04-10 2007-04-01 View