CVE-2006-1342
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 0.7%
from disclosure to weapon2 days
Published on NVDMar 21
1st PoC+2d
exploitation probability
0.7%top 50% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27461⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=linux-netdev&m=114148078223594&w=2http://secunia.com/advisories/19357http://secunia.com/advisories/20398http://secunia.com/advisories/21035http://secunia.com/advisories/22875http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2bhttp://www.novell.com/linux/security/advisories/2006-05-31.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0579.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0580.htmlhttp://www.securityfocus.com/archive/1/451404/100/0/threadedhttp://www.securityfocus.com/archive/1/451417/100/200/threadedhttp://www.securityfocus.com/archive/1/451419/100/200/threaded