mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 01:31:01 +00:00
18 lines
736 B
Markdown
18 lines
736 B
Markdown
### [CVE-2006-1342](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1342)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- http://www.vmware.com/download/esx/esx-254-200610-patch.html
|
|
|
|
#### Github
|
|
No PoCs found on GitHub currently.
|
|
|