Lucene search

[email protected]CVE-2006-0096

HistoryJan 06, 2006 - 11:03 a.m.

CVE-2006-0096

2006-01-0611:03:00

[email protected]

web.nvd.nist.gov

linux kernel

cve-2006-0096

privilege escalation

vulnerability

wan/sdla.c

nvd

local attack vectors

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

JSON

wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.4.0

linuxlinux_kernelMatch2.4.0test1

linuxlinux_kernelMatch2.4.0test10

linuxlinux_kernelMatch2.4.0test11

linuxlinux_kernelMatch2.4.0test12

linuxlinux_kernelMatch2.4.0test2

linuxlinux_kernelMatch2.4.0test3

linuxlinux_kernelMatch2.4.0test4

linuxlinux_kernelMatch2.4.0test5

linuxlinux_kernelMatch2.4.0test6

linuxlinux_kernelMatch2.4.0test7

linuxlinux_kernelMatch2.4.0test8

linuxlinux_kernelMatch2.4.0test9

linuxlinux_kernelMatch2.4.1

linuxlinux_kernelMatch2.4.2

linuxlinux_kernelMatch2.4.3

linuxlinux_kernelMatch2.4.4

linuxlinux_kernelMatch2.4.5

linuxlinux_kernelMatch2.4.6

linuxlinux_kernelMatch2.4.7

linuxlinux_kernelMatch2.4.8

linuxlinux_kernelMatch2.4.9

linuxlinux_kernelMatch2.4.10

linuxlinux_kernelMatch2.4.11

linuxlinux_kernelMatch2.4.12

linuxlinux_kernelMatch2.4.13

linuxlinux_kernelMatch2.4.14

linuxlinux_kernelMatch2.4.15

linuxlinux_kernelMatch2.4.16

linuxlinux_kernelMatch2.4.17

linuxlinux_kernelMatch2.4.18

linuxlinux_kernelMatch2.4.18x86

linuxlinux_kernelMatch2.4.18pre1

linuxlinux_kernelMatch2.4.18pre2

linuxlinux_kernelMatch2.4.18pre3

linuxlinux_kernelMatch2.4.18pre4

linuxlinux_kernelMatch2.4.18pre5

linuxlinux_kernelMatch2.4.18pre6

linuxlinux_kernelMatch2.4.18pre7

linuxlinux_kernelMatch2.4.18pre8

linuxlinux_kernelMatch2.4.19

linuxlinux_kernelMatch2.4.19pre1

linuxlinux_kernelMatch2.4.19pre2

linuxlinux_kernelMatch2.4.19pre3

linuxlinux_kernelMatch2.4.19pre4

linuxlinux_kernelMatch2.4.19pre5

linuxlinux_kernelMatch2.4.19pre6

linuxlinux_kernelMatch2.4.20

linuxlinux_kernelMatch2.4.21

linuxlinux_kernelMatch2.4.21pre1

linuxlinux_kernelMatch2.4.21pre4

linuxlinux_kernelMatch2.4.21pre7

linuxlinux_kernelMatch2.4.22

linuxlinux_kernelMatch2.4.23

linuxlinux_kernelMatch2.4.23pre9

linuxlinux_kernelMatch2.4.23_ow2

linuxlinux_kernelMatch2.4.24

linuxlinux_kernelMatch2.4.24_ow1

linuxlinux_kernelMatch2.4.25

linuxlinux_kernelMatch2.4.26

linuxlinux_kernelMatch2.4.27

linuxlinux_kernelMatch2.4.27pre1

linuxlinux_kernelMatch2.4.27pre2

linuxlinux_kernelMatch2.4.27pre3

linuxlinux_kernelMatch2.4.27pre4

linuxlinux_kernelMatch2.4.27pre5

linuxlinux_kernelMatch2.4.28

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.2

linuxlinux_kernelMatch2.6.3

linuxlinux_kernelMatch2.6.4

linuxlinux_kernelMatch2.6.5

linuxlinux_kernelMatch2.6.6

linuxlinux_kernelMatch2.6.7

linuxlinux_kernelMatch2.6.8

linuxlinux_kernelMatch2.6.8.1

linuxlinux_kernelMatch2.6.92.6.20

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11.1

linuxlinux_kernelMatch2.6.11.2

linuxlinux_kernelMatch2.6.11.3

linuxlinux_kernelMatch2.6.11.4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.9

linuxlinux_kernelMatch2.6.11.10

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.12

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.13

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14rc1

linuxlinux_kernelMatch2.6.14rc2

linuxlinux_kernelMatch2.6.14rc3

linuxlinux_kernelMatch2.6.14rc4

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

linuxlinux_kernelMatch2.6.14.4

linuxlinux_kernelMatch2.6.15

linuxlinux_kernelMatch2.6.15rc1

linuxlinux_kernelMatch2.6.15rc3

linuxlinux_kernelMatch2.6.15rc4

linuxlinux_kernelMatch2.6.15rc5

linuxlinux_kernelMatch2.6.15rc6

linuxlinux_kernelMatch2.6.15rc7

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.4.0
linux:linux_kernellinux linux kerneleq2.4.1
linux:linux_kernellinux linux kerneleq2.4.2
linux:linux_kernellinux linux kerneleq2.4.3
linux:linux_kernellinux linux kerneleq2.4.4
linux:linux_kernellinux linux kerneleq2.4.5
linux:linux_kernellinux linux kerneleq2.4.6
linux:linux_kernellinux linux kerneleq2.4.7
linux:linux_kernellinux linux kerneleq2.4.8
linux:linux_kernellinux linux kerneleq2.4.9

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.4.0
linux:linux_kernel	linux linux kernel	eq	2.4.1
linux:linux_kernel	linux linux kernel	eq	2.4.2
linux:linux_kernel	linux linux kernel	eq	2.4.3
linux:linux_kernel	linux linux kernel	eq	2.4.4
linux:linux_kernel	linux linux kernel	eq	2.4.5
linux:linux_kernel	linux linux kernel	eq	2.4.6
linux:linux_kernel	linux linux kernel	eq	2.4.7
linux:linux_kernel	linux linux kernel	eq	2.4.8
linux:linux_kernel	linux linux kernel	eq	2.4.9

Rows per page:

1-10 of 681

References

linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c

secunia.com/advisories/18527

secunia.com/advisories/18977

secunia.com/advisories/19374

www.debian.org/security/2006/dsa-1017

www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f

www.securityfocus.com/bid/16304

wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044

usn.ubuntu.com/244-1/