CVE-2006-2451
- State
- Published
- Severity
- Not scored
- Published
- Jul 7, 2006
- Updated
- Aug 7, 2024
- Reserved
- May 18, 2006
Description
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2006:0574vendor-advisory
- 20060713 Re: [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )mailing-list
- SUSE-SR:2006:017vendor-advisory
- SUSE-SA:2006:042vendor-advisory
- ADV-2006-2699vdb-entry
- 20060707 rPSA-2006-0122-1 kernelmailing-list
- 20060716 Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaroundmailing-list
- 20060714 Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaroundmailing-list
- 20060710 Re: rPSA-2006-0122-1 kernelmailing-list
- SUSE-SA:2006:047vendor-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0
- 1016451vdb-entry
- 20965third-party-advisory
- 18874vdb-entry
- USN-311-1vendor-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24
- 27030vdb-entry
- 21966third-party-advisory
- SUSE-SR:2006:016vendor-advisory
- 20953third-party-advisory
- 21498third-party-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4
- SUSE-SA:2006:049vendor-advisory
- 20986third-party-advisory
- 20991third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm
- 20960third-party-advisory
- oval:org.mitre.oval:def:11336vdb-entrysignature
- 20060712 Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )mailing-list
- https://issues.rpath.com/browse/RPL-488
- 20060713 Linux sys_prctl LKM based hotfixmailing-list
- 21179third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.