CVE-2006-2451

Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation

Severity Score

4.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

El soporte suid_dumpable de Linux kernel 2.6.13 hasta versiones anteriores a 2.6.17.4, y 2.6.16 anterior a 2.6.16.24, permite a usuarios locales provocar una denegación de servicio (agotamiento de disco) y posiblemente obtener privilegios a través del argumento PR_SET_DUMPABLE de la función prctl y un programa que provoca que se cree un fichero de volcado de memoria (core dump) en un directorio en el que el usuario no tiene permisos.

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and POSSIBLY gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

*Credits: N/A

CVSS Scores

NISTv2 4.6

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-05-18 CVE Reserved
2006-07-07 CVE Published
2006-07-11 First Exploit
2023-03-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-399: Resource Management Errors

CAPEC

References (40)

URL	Tag	Source
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902	X_refsource_misc
http://securitytracker.com/id?1016451	Vdb Entry
http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm	X_refsource_confirm
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0	X_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24	X_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4	X_refsource_confirm
http://www.osvdb.org/27030	Vdb Entry
http://www.securityfocus.com/archive/1/439483/100/100/threaded	Mailing List
http://www.securityfocus.com/archive/1/439610/100/100/threaded	Mailing List
http://www.securityfocus.com/archive/1/439869/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/440057/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/440117/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/440118/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/440379/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/18874	Vdb Entry
https://issues.rpath.com/browse/RPL-488	X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/2004	2006-07-11
https://www.exploit-db.com/exploits/2005	2006-07-12
https://www.exploit-db.com/exploits/2006	2006-07-13
https://www.exploit-db.com/exploits/2011	2006-07-14
https://www.exploit-db.com/exploits/2031	2006-07-18

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/20953	2023-11-07
http://secunia.com/advisories/20960	2023-11-07
http://secunia.com/advisories/20965	2023-11-07
http://secunia.com/advisories/20986	2023-11-07
http://secunia.com/advisories/20991	2023-11-07
http://secunia.com/advisories/21179	2023-11-07
http://secunia.com/advisories/21498	2023-11-07
http://secunia.com/advisories/21966	2023-11-07
http://www.novell.com/linux/security/advisories/2006_16_sr.html	2023-11-07
http://www.novell.com/linux/security/advisories/2006_17_sr.html	2023-11-07
http://www.novell.com/linux/security/advisories/2006_42_kernel.html	2023-11-07
http://www.novell.com/linux/security/advisories/2006_47_kernel.html	2023-11-07
http://www.novell.com/linux/security/advisories/2006_49_kernel.html	2023-11-07
http://www.redhat.com/support/errata/RHSA-2006-0574.html	2023-11-07
http://www.ubuntu.com/usn/usn-311-1	2023-11-07
http://www.vupen.com/english/advisories/2006/2699	2023-11-07
https://access.redhat.com/security/cve/CVE-2006-2451	2006-07-07
https://bugzilla.redhat.com/show_bug.cgi?id=195902	2006-07-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.14.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"		rc7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.15.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.9 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.9"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.10"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.11"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.12"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.13 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.13"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.14"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.15"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.16"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.17"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.18"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.19 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.19"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.20 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.20"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.21"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.22"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.16.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.23"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.17.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.17.3"		-		Affected