NVD

Id
61150  
Name
CVE-2006-2451  
Description
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-07  
Modified Date
2012-03-19  
Seq
2006-2451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316020 61150 CVE-2006-2451 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902  View
316021 61150 CVE-2006-2451 oval:org.mitre.oval:def:11336  View
316022 61150 CVE-2006-2451 1016451  View
316023 61150 CVE-2006-2451 http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm  View
316024 61150 CVE-2006-2451 http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git;a=commit;h=0af184bb9f80edfbb94de46cb52e9592e5a547b0  View
316025 61150 CVE-2006-2451 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24  View
316026 61150 CVE-2006-2451 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4  View
316027 61150 CVE-2006-2451 SUSE-SR:2006:016  View
316028 61150 CVE-2006-2451 SUSE-SR:2006:017  View
316029 61150 CVE-2006-2451 SUSE-SA:2006:042  View
316030 61150 CVE-2006-2451 SUSE-SA:2006:047  View
316031 61150 CVE-2006-2451 SUSE-SA:2006:049  View
316032 61150 CVE-2006-2451 RHSA-2006:0574  View
316033 61150 CVE-2006-2451 20060710 Re: rPSA-2006-0122-1 kernel  View
316034 61150 CVE-2006-2451 20060707 rPSA-2006-0122-1 kernel  View
316035 61150 CVE-2006-2451 20060712 Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )  View
316036 61150 CVE-2006-2451 20060714 Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround  View
316037 61150 CVE-2006-2451 20060713 Re: [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )  View
316038 61150 CVE-2006-2451 20060713 Linux sys_prctl LKM based hotfix  View
316039 61150 CVE-2006-2451 20060716 Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround  View
316040 61150 CVE-2006-2451 18874  View
316041 61150 CVE-2006-2451 USN-311-1  View
316042 61150 CVE-2006-2451 ADV-2006-2699  View
316043 61150 CVE-2006-2451 https://issues.rpath.com/browse/RPL-488  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58175 JVNDB-2006-000371 Linux Kernel の PRCTL() システムコールにおける権限昇格の脆弱性 Linux kernel において、権限を持たないプロセスが PR_SET_DUMPABLE フラグに値 2 をセットすることが可能であるため、本来書き込み権限のないディレクトリにコアダンプファイルを作成することが可能な脆弱性が存在します。 CVE-2006-2451 18553 CVE-2006-2451 61150 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000371.html 2006-07-07 2007-04-01 View