OSVDB ID: 27030

Title: Linux Kernel prctl Core Dumpe Handling Local Privilege Escalation

Info

Disclosure

Jul 06, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Linux Kernel contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when an error occurs during handling of core dumps by the 'prctl' function. This flaw may allow privilege escalation and lead to a loss of Integrity.

Classification

Location: Local Access Required
Attack Type: Other
Impact: Loss of Integrity
Exploit: Exploit Commercial
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 2.6.17.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Linux

Kernel

2.6

References

Credit

  • Red Hat, Inc. - Red Hat, Inc.


Direct URL: http://osvdb.org/27030