2017-10-16 12:31:07 -04:00
{
2019-03-18 02:44:05 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2006-2451" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 02:44:05 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "RHSA-2006:0574" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2006-0574.html"
} ,
{
"name" : "20060713 Re: [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/440117/100/0/threaded"
} ,
{
"name" : "SUSE-SR:2006:017" ,
"refsource" : "SUSE" ,
"url" : "http://www.novell.com/linux/security/advisories/2006_17_sr.html"
} ,
{
"name" : "SUSE-SA:2006:042" ,
"refsource" : "SUSE" ,
"url" : "http://www.novell.com/linux/security/advisories/2006_42_kernel.html"
} ,
{
"name" : "ADV-2006-2699" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2006/2699"
} ,
{
"name" : "20060707 rPSA-2006-0122-1 kernel" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/439483/100/100/threaded"
} ,
{
"name" : "20060716 Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/440379/100/0/threaded"
} ,
{
"name" : "20060714 Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/440057/100/0/threaded"
} ,
{
"name" : "20060710 Re: rPSA-2006-0122-1 kernel" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/439610/100/100/threaded"
} ,
{
"name" : "SUSE-SA:2006:047" ,
"refsource" : "SUSE" ,
"url" : "http://www.novell.com/linux/security/advisories/2006_47_kernel.html"
} ,
{
"name" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git;a=commit;h=0af184bb9f80edfbb94de46cb52e9592e5a547b0" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git;a=commit;h=0af184bb9f80edfbb94de46cb52e9592e5a547b0"
} ,
{
"name" : "1016451" ,
"refsource" : "SECTRACK" ,
"url" : "http://securitytracker.com/id?1016451"
} ,
{
"name" : "20965" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/20965"
} ,
{
"name" : "18874" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/18874"
} ,
{
"name" : "USN-311-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/usn-311-1"
} ,
{
"name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24"
} ,
{
"name" : "27030" ,
"refsource" : "OSVDB" ,
"url" : "http://www.osvdb.org/27030"
} ,
{
"name" : "21966" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/21966"
} ,
{
"name" : "SUSE-SR:2006:016" ,
"refsource" : "SUSE" ,
"url" : "http://www.novell.com/linux/security/advisories/2006_16_sr.html"
} ,
{
"name" : "20953" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/20953"
} ,
{
"name" : "21498" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/21498"
} ,
{
"name" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902" ,
"refsource" : "MISC" ,
"url" : "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902"
} ,
{
"name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4"
} ,
{
"name" : "SUSE-SA:2006:049" ,
"refsource" : "SUSE" ,
"url" : "http://www.novell.com/linux/security/advisories/2006_49_kernel.html"
} ,
{
"name" : "20986" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/20986"
} ,
{
"name" : "20991" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/20991"
} ,
{
"name" : "http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm"
} ,
{
"name" : "20960" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/20960"
} ,
{
"name" : "oval:org.mitre.oval:def:11336" ,
"refsource" : "OVAL" ,
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336"
} ,
{
"name" : "20060712 Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/439869/100/0/threaded"
} ,
{
"name" : "https://issues.rpath.com/browse/RPL-488" ,
"refsource" : "CONFIRM" ,
"url" : "https://issues.rpath.com/browse/RPL-488"
} ,
{
"name" : "20060713 Linux sys_prctl LKM based hotfix" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/440118/100/0/threaded"
} ,
{
"name" : "21179" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/21179"
}
]
}
}
