CVE-2005-2490

Published: Sep 14, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.

Affected (42)

Products: Linux: Linux Kernel

1 product

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.0
Linux Linux Kernel	Version 2.6.0 test10
Linux Linux Kernel	Version 2.6.0 test11
Linux Linux Kernel	Version 2.6.0 test1
Linux Linux Kernel	Version 2.6.0 test2
Linux Linux Kernel	Version 2.6.0 test3
Linux Linux Kernel	Version 2.6.0 test4
Linux Linux Kernel	Version 2.6.0 test5
Linux Linux Kernel	Version 2.6.0 test6
Linux Linux Kernel	Version 2.6.0 test7
Linux Linux Kernel	Version 2.6.0 test8
Linux Linux Kernel	Version 2.6.0 test9
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.10 rc2
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.11 rc2
Linux Linux Kernel	Version 2.6.11 rc3
Linux Linux Kernel	Version 2.6.11 rc4
Linux Linux Kernel	Version 2.6.12 rc1
Linux Linux Kernel	Version 2.6.12 rc4
Linux Linux Kernel	Version 2.6.1
Linux Linux Kernel	Version 2.6.1 rc1
Linux Linux Kernel	Version 2.6.1 rc2
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.6 rc1
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.7 rc1
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.8 rc1
Linux Linux Kernel	Version 2.6.8 rc2
Linux Linux Kernel	Version 2.6.8 rc3
Linux Linux Kernel	Version 2.6.9 2.6.20
Linux Linux Kernel	Version 2.6_test9_cvs

References (48)

http://marc.info/?l=bugtraq&m=112690609622266&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/16747/

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/17002

Source: secalert@redhat.com

http://secunia.com/advisories/17073

Source: secalert@redhat.com

http://secunia.com/advisories/17826

Source: secalert@redhat.com

http://secunia.com/advisories/17918

Source: secalert@redhat.com

http://secunia.com/advisories/19374

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1017

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-514.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-663.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/419522/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/427980/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/428028/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/428058/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14785

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-178-1

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2005/1878

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/22217

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=112690609622266&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/16747/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17002

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17073

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17826

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17918

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19374

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1017

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-514.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-663.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/419522/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/427980/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/428028/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/428058/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14785

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-178-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2005/1878

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/22217

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.