#VU99937 Information exposure in Linux kernel - CVE-2005-0176

Vulnerability identifier: #VU99937

Vulnerability risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2005-0176

CWE-ID: CWE-200

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

---

External links
https:ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
https://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
https://marc.info/?l=full-disclosure&m=110846102231365&w=2
https://secunia.com/advisories/19607
https://www.redhat.com/support/errata/RHSA-2005-092.html
https://www.redhat.com/support/errata/RHSA-2005-472.html
https://www.securityfocus.com/bid/12598
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1225
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8778

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.