CVE-2006-2451
23Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 4.4%
da publicação à arma4 dias
Publicada no NVD7 de jul.
1ª PoC+4d
probabilidade de exploração
4.4%top 10% das CVEs
exploração observada
nãonenhuma fonte reporta
5 exploit(s) público(s)
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2031exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2006exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2004exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2005exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2011⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902http://secunia.com/advisories/20953http://secunia.com/advisories/20960http://secunia.com/advisories/20965http://secunia.com/advisories/20986http://secunia.com/advisories/20991http://secunia.com/advisories/21179http://secunia.com/advisories/21498http://secunia.com/advisories/21966http://securitytracker.com/id?1016451https://issues.rpath.com/browse/RPL-488https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336