NVD

Id
7996  
Name
CVE-2011-1006  
Description
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted controller list on the command line of an application. NOTE: it is not clear whether this issue crosses privilege boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-22  
Modified Date
2011-04-20  
Seq
2011-1006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45449 7996 CVE-2011-1006 http://libcg.git.sourceforge.net/git/gitweb.cgi?p=libcg/libcg;a=commit;h=5ae8aea1ecd60c439121d3329d8eaabf13d292c1  View
45450 7996 CVE-2011-1006 FEDORA-2011-2631  View
45451 7996 CVE-2011-1006 FEDORA-2011-2638  View
45452 7996 CVE-2011-1006 openSUSE-SU-2011:0316  View
45453 7996 CVE-2011-1006 http://sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download  View
45454 7996 CVE-2011-1006 DSA-2193  View
45455 7996 CVE-2011-1006 RHSA-2011:0320  View
45456 7996 CVE-2011-1006 46729  View
45457 7996 CVE-2011-1006 1025158  View
45458 7996 CVE-2011-1006 ADV-2011-0679  View
45459 7996 CVE-2011-1006 ADV-2011-0774  View
45460 7996 CVE-2011-1006 https://bugzilla.redhat.com/show_bug.cgi?id=678107  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31115 JVNDB-2011-001354 Control Group Configuration Library の parse_cgroup_spec 関数におけるヒープベースのバッファオーバーフローの脆弱性 Control Group Configuration Library の tools/tools-common.c 内にある parse_cgroup_spec 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-1006 48913 CVE-2011-1006 7996 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001354.html 2011-03-03 2011-04-05 View