NVD

Id
62300  
Name
CVE-2006-3626  
Description
Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2011-03-07  
Seq
2006-3626  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322794 62300 CVE-2006-3626 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5  View
322795 62300 CVE-2006-3626 20060714 Linux kernel 0day - dynamite inside, don"t burn your fingers  View
322796 62300 CVE-2006-3626 oval:org.mitre.oval:def:10060  View
322797 62300 CVE-2006-3626 http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm  View
322798 62300 CVE-2006-3626 DSA-1111  View
322799 62300 CVE-2006-3626 http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=0cb8f20d000c25118947fcafa81606300ced35f8;hp=243a94af0427b2630fb85f489a5419410dac3bfc;hb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3;f=fs/proc/base.c  View
322800 62300 CVE-2006-3626 MDKSA-2006:124  View
322801 62300 CVE-2006-3626 SUSE-SR:2006:017  View
322802 62300 CVE-2006-3626 SUSE-SA:2006:042  View
322803 62300 CVE-2006-3626 SUSE-SA:2006:047  View
322804 62300 CVE-2006-3626 SUSE-SA:2006:049  View
322805 62300 CVE-2006-3626 RHSA-2006:0617  View
322806 62300 CVE-2006-3626 20060717 rPSA-2006-0130-1 kernel  View
322807 62300 CVE-2006-3626 18992  View
322808 62300 CVE-2006-3626 USN-319-2  View
322809 62300 CVE-2006-3626 USN-319-1  View
322810 62300 CVE-2006-3626 ADV-2006-2816  View
322811 62300 CVE-2006-3626 linux-proc-race-condition(27790)  View
322812 62300 CVE-2006-3626 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58203 JVNDB-2006-000399 Linux Kernel の /proc ファイルシステムにおける root 権限を取得される脆弱性 Linux Kernel の /proc ファイルシステムには、ファイルのステータスを変更した場合、カーネルが /proc 上でプロセスを処理する過程で競合状態が発生する脆弱性が存在します。 CVE-2006-3626 19728 CVE-2006-3626 62300 6.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000399.html 2006-07-14 2007-04-01 View