CVE-2006-3626

Published: Jul 18, 2006Modified: Apr 16, 2026

6.2

Vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 1.9 / Impact: 10.0

Source: NVD

Description

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Affected (42)

Products: Linux: Linux Kernel

1 product

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.16.10
Linux Linux Kernel	Version 2.6.16.11
Linux Linux Kernel	Version 2.6.16.12
Linux Linux Kernel	Version 2.6.16.13
Linux Linux Kernel	Version 2.6.16.14
Linux Linux Kernel	Version 2.6.16.15
Linux Linux Kernel	Version 2.6.16.16
Linux Linux Kernel	Version 2.6.16.17
Linux Linux Kernel	Version 2.6.16.18
Linux Linux Kernel	Version 2.6.16.19
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.20
Linux Linux Kernel	Version 2.6.16.21
Linux Linux Kernel	Version 2.6.16.22
Linux Linux Kernel	Version 2.6.16.23
Linux Linux Kernel	Version 2.6.16.24
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16.5
Linux Linux Kernel	Version 2.6.16.6
Linux Linux Kernel	Version 2.6.16.7
Linux Linux Kernel	Version 2.6.16.8
Linux Linux Kernel	Version 2.6.16.9
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.16 rc1
Linux Linux Kernel	Version 2.6.16 rc2
Linux Linux Kernel	Version 2.6.16 rc3
Linux Linux Kernel	Version 2.6.16 rc4
Linux Linux Kernel	Version 2.6.16 rc5
Linux Linux Kernel	Version 2.6.16 rc6
Linux Linux Kernel	Version 2.6.17.1
Linux Linux Kernel	Version 2.6.17.2
Linux Linux Kernel	Version 2.6.17.3
Linux Linux Kernel	Version 2.6.17.4
Linux Linux Kernel	Version 2.6.17
Linux Linux Kernel	Version 2.6.17 rc1
Linux Linux Kernel	Version 2.6.17 rc2
Linux Linux Kernel	Version 2.6.17 rc3
Linux Linux Kernel	Version 2.6.17 rc4
Linux Linux Kernel	Version 2.6.17 rc5
Linux Linux Kernel	Version 2.6.17 rc6

References (58)

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.html

Source: cve@mitre.org

http://secunia.com/advisories/21041

Source: cve@mitre.org

http://secunia.com/advisories/21057

Source: cve@mitre.org

http://secunia.com/advisories/21073

Source: cve@mitre.org

http://secunia.com/advisories/21119

Source: cve@mitre.org

http://secunia.com/advisories/21123

Source: cve@mitre.org

http://secunia.com/advisories/21179

Source: cve@mitre.org

http://secunia.com/advisories/21498

Source: cve@mitre.org

http://secunia.com/advisories/21605

Source: cve@mitre.org

http://secunia.com/advisories/22174

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1111

Source: cve@mitre.org

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0cb8f20d000c25118947fcafa81606300ced35f8%3Bhp=243a94af0427b2630fb85f489a5419410dac3bfc%3Bhb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3%3Bf=fs/proc/base.c

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:124

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_17_sr.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_42_kernel.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_47_kernel.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_49_kernel.html

Source: cve@mitre.org

http://www.osvdb.org/27120

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0617.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440300/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18992

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-319-2

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2816

Source: cve@mitre.org

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27790

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10060

Source: cve@mitre.org

https://usn.ubuntu.com/319-1/

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21041

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21057

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21073

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21119

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21123

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21179

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21498

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21605

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22174

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1111

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0cb8f20d000c25118947fcafa81606300ced35f8%3Bhp=243a94af0427b2630fb85f489a5419410dac3bfc%3Bhb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3%3Bf=fs/proc/base.c

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:124

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_17_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_42_kernel.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_47_kernel.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_49_kernel.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/27120

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0617.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/440300/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18992

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-319-2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2816

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27790

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10060

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/319-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.