CVE-2006-2451

Published: Jul 7, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

Affected (74)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

74 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.13.1
Linux Linux Kernel	Version 2.6.13.2
Linux Linux Kernel	Version 2.6.13.3
Linux Linux Kernel	Version 2.6.13.4
Linux Linux Kernel	Version 2.6.13.5
Linux Linux Kernel	Version 2.6.13
Linux Linux Kernel	Version 2.6.14.1
Linux Linux Kernel	Version 2.6.14.2
Linux Linux Kernel	Version 2.6.14.3
Linux Linux Kernel	Version 2.6.14.4
Linux Linux Kernel	Version 2.6.14.5
Linux Linux Kernel	Version 2.6.14.6
Linux Linux Kernel	Version 2.6.14.7
Linux Linux Kernel	Version 2.6.14
Linux Linux Kernel	Version 2.6.14 rc1
Linux Linux Kernel	Version 2.6.14 rc2
Linux Linux Kernel	Version 2.6.14 rc3
Linux Linux Kernel	Version 2.6.14 rc4
Linux Linux Kernel	Version 2.6.14 rc5
Linux Linux Kernel	Version 2.6.15.1
Linux Linux Kernel	Version 2.6.15.2
Linux Linux Kernel	Version 2.6.15.3
Linux Linux Kernel	Version 2.6.15.4
Linux Linux Kernel	Version 2.6.15.5
Linux Linux Kernel	Version 2.6.15.6
Linux Linux Kernel	Version 2.6.15.7
Linux Linux Kernel	Version 2.6.15
Linux Linux Kernel	Version 2.6.15 rc1
Linux Linux Kernel	Version 2.6.15 rc2
Linux Linux Kernel	Version 2.6.15 rc3
Linux Linux Kernel	Version 2.6.15 rc4
Linux Linux Kernel	Version 2.6.15 rc5
Linux Linux Kernel	Version 2.6.15 rc6
Linux Linux Kernel	Version 2.6.15 rc7
Linux Linux Kernel	Version 2.6.16.10
Linux Linux Kernel	Version 2.6.16.11
Linux Linux Kernel	Version 2.6.16.12
Linux Linux Kernel	Version 2.6.16.13
Linux Linux Kernel	Version 2.6.16.14
Linux Linux Kernel	Version 2.6.16.15
Linux Linux Kernel	Version 2.6.16.16
Linux Linux Kernel	Version 2.6.16.17
Linux Linux Kernel	Version 2.6.16.18
Linux Linux Kernel	Version 2.6.16.19
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.20
Linux Linux Kernel	Version 2.6.16.21
Linux Linux Kernel	Version 2.6.16.22
Linux Linux Kernel	Version 2.6.16.23
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16.5
Linux Linux Kernel	Version 2.6.16.6
Linux Linux Kernel	Version 2.6.16.7
Linux Linux Kernel	Version 2.6.16.8
Linux Linux Kernel	Version 2.6.16.9
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.16 rc1
Linux Linux Kernel	Version 2.6.16 rc2
Linux Linux Kernel	Version 2.6.16 rc3
Linux Linux Kernel	Version 2.6.16 rc4
Linux Linux Kernel	Version 2.6.16 rc5
Linux Linux Kernel	Version 2.6.16 rc6
Linux Linux Kernel	Version 2.6.17.1
Linux Linux Kernel	Version 2.6.17.2
Linux Linux Kernel	Version 2.6.17.3
Linux Linux Kernel	Version 2.6.17
Linux Linux Kernel	Version 2.6.17 rc1
Linux Linux Kernel	Version 2.6.17 rc2
Linux Linux Kernel	Version 2.6.17 rc3
Linux Linux Kernel	Version 2.6.17 rc4
Linux Linux Kernel	Version 2.6.17 rc5
Linux Linux Kernel	Version 2.6.17 rc6

Related CWEs

CWE-399

References (66)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902

Source: secalert@redhat.com

http://secunia.com/advisories/20953

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20960

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20965

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20986

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20991

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21179

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21498

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21966

Source: secalert@redhat.com

Vendor Advisory

http://securitytracker.com/id?1016451

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm

Source: secalert@redhat.com

http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_16_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_17_sr.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_42_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_47_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_49_kernel.html

Source: secalert@redhat.com

http://www.osvdb.org/27030

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0574.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/439483/100/100/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/439610/100/100/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/439869/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/440057/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/440117/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/440118/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/440379/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/18874

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-311-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/2699

Source: secalert@redhat.com

Vendor Advisory

https://issues.rpath.com/browse/RPL-488

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336

Source: secalert@redhat.com

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902