#VU99901 Security restrictions bypass in Linux kernel - CVE-2006-2071
Vulnerability identifier: #VU99901
Vulnerability risk: Low
CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-264
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to corrupt data.
Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel: All versions
External links
https://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6
https://secunia.com/advisories/20157
https://secunia.com/advisories/20716
https://secunia.com/advisories/21035
https://secunia.com/advisories/22292
https://secunia.com/advisories/22497
https://secunia.com/advisories/22875
https://secunia.com/advisories/22945
https://secunia.com/advisories/23064
https://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
https://support.avaya.com/elmodocs2/security/ASA-2006-254.htm
https://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b78b6af66a5fbaf17d7e6bfc32384df5e34408c8
https://www.mandriva.com/security/advisories?name=MDKSA-2006:086
https://www.osvdb.org/25139
https://www.redhat.com/support/errata/RHSA-2006-0579.html
https://www.redhat.com/support/errata/RHSA-2006-0580.html
https://www.redhat.com/support/errata/RHSA-2006-0689.html
https://www.redhat.com/support/errata/RHSA-2006-0710.html
https://www.securityfocus.com/archive/1/451404/100/0/threaded
https://www.securityfocus.com/archive/1/451417/100/200/threaded
https://www.securityfocus.com/archive/1/451419/100/200/threaded
https://www.securityfocus.com/archive/1/451426/100/200/threaded
https://www.ubuntu.com/usn/usn-302-1
https://www.vmware.com/download/esx/esx-202-200610-patch.html
https://www.vmware.com/download/esx/esx-213-200610-patch.html
https://www.vmware.com/download/esx/esx-254-200610-patch.html
https://www.vupen.com/english/advisories/2006/1391
https://www.vupen.com/english/advisories/2006/4502
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190073
https://exchange.xforce.ibmcloud.com/vulnerabilities/26169
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9978
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
