|
|
CVE Reference: CVE-2006-6304 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-6304 |
|
|
Description: The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump. |
|
|
CVE Status: Candidate |
|
|
References: TRUSTIX http://www.trustix.org/errata/2006/0074/ SAID Secunia Advisory: SA23349 REDHAT OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10797 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7446 CONFIRM http://support.avaya.com/css/P8/documents/100073666 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.1 BID 21591 |
|
| Return to the previous page. |
