Veracode Vulnerability DatabaseVERACODE:23049Information Disclosure
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
The Linux kernel is vulnerable to Information Disclosure.A flaw in the core-dump handling allows a local user to create core dumps from unreadable binaries via PT_INTERP.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kernel | eq | 2.6.18__8.el5 | |
| kernel | eq | 2.6.18__8.el5 |
References
osvdb.org/35930
rhn.redhat.com/errata/RHSA-2007-0488.html
secunia.com/advisories/24482
secunia.com/advisories/24752
secunia.com/advisories/24777
secunia.com/advisories/25078
secunia.com/advisories/25714
secunia.com/advisories/25838
secunia.com/advisories/26289
support.avaya.com/elmodocs2/security/ASA-2007-287.htm
www.debian.org/security/2007/dsa-1286
www.debian.org/security/2007/dsa-1304
www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20
www.mandriva.com/security/advisories?name=MDKSA-2007:060
www.mandriva.com/security/advisories?name=MDKSA-2007:078
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2007-0099.html
www.securityfocus.com/bid/22903
www.ubuntu.com/usn/usn-451-1
access.redhat.com/errata/RHSA-2007:0099
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10343
Related
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N