CVE-2006-3626

Severity

62%

Complexity

19%

Confidentiality

165%

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

CVSS 2.0 Base Score 6.2. CVSS Attack Vector: local. CVSS Attack Complexity: high. CVSS Vector: (AV:L/AC:H/Au:N/C:C/I:C/A:C).

Overview

Type

Linux Kernel

First reported 18 years ago

2006-07-18 15:46:00

Last updated 6 years ago

2018-10-18 16:48:00

Affected Software

Linux Kernel 2.6.16

2.6.16

Linux Kernel 2.6.16 Release Candidate 1

2.6.16

Linux Kernel 2.6.16 Release Candidate 2

2.6.16

Linux Kernel 2.6.16 Release Candidate 3

2.6.16

Linux Kernel 2.6.16 Release Candidate 4

2.6.16

Linux Kernel 2.6.16 Release Candidate 5

2.6.16

Linux Kernel 2.6.16 Release Candidate 6

2.6.16

Linux Kernel 2.6.16.1

2.6.16.1

Linux Kernel 2.6.16.2

2.6.16.2

Linux Kernel 2.6.16.3

2.6.16.3

Linux Kernel 2.6.16.4

2.6.16.4

Linux Kernel 2.6.16.5

2.6.16.5

Linux Kernel 2.6.16.6

2.6.16.6

Linux Kernel 2.6.16.7

2.6.16.7

Linux Kernel 2.6.16.8

2.6.16.8

Linux Kernel 2.6.16.9

2.6.16.9

Linux Kernel 2.6.16.10

2.6.16.10

Linux Kernel 2.6.16.11

2.6.16.11

Linux Kernel 2.6.16.12

2.6.16.12

Linux Kernel 2.6.16.13

2.6.16.13

Linux Kernel 2.6.16.14

2.6.16.14

Linux Kernel 2.6.16.15

2.6.16.15

Linux Kernel 2.6.16.16

2.6.16.16

Linux Kernel 2.6.16.17

2.6.16.17

Linux Kernel 2.6.16.18

2.6.16.18

Linux Kernel 2.6.16.19

2.6.16.19

Linux Kernel 2.6.16.20

2.6.16.20

Linux Kernel 2.6.16.21

2.6.16.21

Linux Kernel 2.6.16.22

2.6.16.22

Linux Kernel 2.6.16.23

2.6.16.23

Linux Kernel 2.6.16.24

2.6.16.24

Linux Kernel 2.6.17

2.6.17

Linux Kernel 2.6.17 Release Candidate 1

2.6.17

Linux Kernel 2.6.17 Release Candidate 2

2.6.17

Linux Kernel 2.6.17 Release Candidate 3

2.6.17

Linux Kernel 2.6.17 Release Candidate 4

2.6.17

Linux Kernel 2.6.17 Release Candidate 5

2.6.17

Linux Kernel 2.6.17 Release Candidate 6

2.6.17

Linux Kernel 2.6.17.1

2.6.17.1

Linux Kernel 2.6.17.2

2.6.17.2

Linux Kernel 2.6.17.3

2.6.17.3

Linux Kernel 2.6.17.4

2.6.17.4

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5

20060714 Linux kernel 0day - dynamite inside, don't burn your fingers

21041

21057

21073

21119

21123

21179

21498

21605

22174

http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

DSA-1111

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=0cb8f20d000c25118947fcafa81606300ced35f8;hp=243a94af0427b2630fb85f489a5419410dac3bfc;hb=18b0bbd8ca6d3cb90425aa0d77b99a762c6d6de3;f=fs/proc/base.c

MDKSA-2006:124

SUSE-SR:2006:017

SUSE-SA:2006:042

SUSE-SA:2006:047

SUSE-SA:2006:049

27120

RHSA-2006:0617

20060717 rPSA-2006-0130-1 kernel

18992

USN-319-2

ADV-2006-2816

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973

linux-proc-race-condition(27790)

oval:org.mitre.oval:def:10060

USN-319-1

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.