Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-2451
HistoryJul 07, 2006 - 12:00 a.m.

CVE-2006-2451

2006-07-0700:00:00
ubuntu.com
ubuntu.com
15

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%

The suid_dumpable support in Linux kernel 2.6.13 up to versions before
2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a
denial of service (disk consumption) and possibly gain privileges via the
PR_SET_DUMPABLE argument of the prctl function and a program that causes a
core dump file to be created in a directory for which the user does not
have permissions.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-29.58UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.40UNKNOWN

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%