CVE-2006-5461 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5461
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5461

Description: Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/30207 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-380-1 SUSE http://www.novell.com/linux/security/advisories/2006_26_sr.html ST 1017257 SAID Secunia Advisory: SA22932 Secunia Advisory: SA23042 Secunia Advisory: SA23020 Secunia Advisory: SA22807 Secunia Advisory: SA22852 MLIST MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:215 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200611-13.xml CONFIRM http://avahi.org/milestone/Avahi%200.6.15 BID 21016

Return to the previous page.