NVD

Id
68244  
Name
CVE-2005-2555  
Description
Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-08-16  
Modified Date
2016-11-18  
Seq
2005-2555  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352785 68244 CVE-2005-2555 oval:org.mitre.oval:def:10444  View
352786 68244 CVE-2005-2555 DSA-1017  View
352787 68244 CVE-2005-2555 DSA-1018  View
352788 68244 CVE-2005-2555 http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6fc0b4a7a73a81e74d0004732df358f4f9975be2  View
352789 68244 CVE-2005-2555 MDKSA-2005:218  View
352790 68244 CVE-2005-2555 SUSE-SA:2005:050  View
352791 68244 CVE-2005-2555 RHSA-2005:514  View
352792 68244 CVE-2005-2555 RHSA-2005:663  View
352793 68244 CVE-2005-2555 FLSA:157459-3  View
352794 68244 CVE-2005-2555 14609  View
352795 68244 CVE-2005-2555 USN-169-1  View
352796 68244 CVE-2005-2555 ADV-2005-1878  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62291 JVNDB-2005-000493 Linux Kernel の xfrm_user_policy() 関数におけるバッファオーバーフローの脆弱性 Linux Kernel の ip_sockglue.c では、IPsec 実装のための xfrm ポリシーに関する処理を行う xfrm_user_policy() 関数において、実行プロセスに対する CAP_NET_ADMIN 権限によるアクセス制限が不適切である脆弱性が存在します。 CVE-2005-2555 13759 CVE-2005-2555 68244 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000493.html 2005-08-16 2007-04-01 View