Secunia SmallBusiness
Products
Solutions
Customers
Partner
Resources
Company
Careers
Community

CVE Reference: CVE-2007-6206
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-6206

Description:
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/38841

UBUNTU
  http://www.ubuntu.com/usn/usn-574-1
  http://www.ubuntu.com/usn/usn-578-1

SUSE
  http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html
  http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
  http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

SAID
  Secunia Advisory: SA28643
  Secunia Advisory: SA29058
  Secunia Advisory: SA28971
  Secunia Advisory: SA28889
  Secunia Advisory: SA28826
  Secunia Advisory: SA28706
  Secunia Advisory: SA28748
  Secunia Advisory: SA28141
  Secunia Advisory: SA27908
  Secunia Advisory: SA30818
  Secunia Advisory: SA30962
  Secunia Advisory: SA31246
  Secunia Advisory: SA30110
  Secunia Advisory: SA33280

REDHAT
  http://www.redhat.com/support/errata/RHSA-2008-0787.html
  http://www.redhat.com/support/errata/RHSA-2008-0211.html
  http://www.redhat.com/support/errata/RHSA-2008-0089.html
  http://rhn.redhat.com/errata/RHSA-2008-0055.html

OVAL
  http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10719

MLIST
  http://lists.vmware.com/pipermail/security-announce/2008/000023.html

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:112
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:044
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:086

DEBIAN
  http://www.debian.org/security/2008/dsa-1504
  http://www.debian.org/security/2007/dsa-1436
  http://www.debian.org/security/2008/dsa-1503

CONFIRM
  http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0048
  http://bugzilla.kernel.org/show_bug.cgi?id=3043
  http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=c46f739dd39db3b07ab5deb4e3ec81e1c04a91af

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/487808/100/0/threaded

BID
  26701


Return to the previous page.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom
 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability