CVE-2006-2071

CVE Details

Release Date:2006-04-27

Description


Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bugs.

See more information about CVE-2006-2071 from MITRE CVE dictionary and NIST NVD


CVSS v2.0 metrics


NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score: 2.1 Base Metrics: AV:L/AC:L/Au:N/C:N/I:P/A:N
Access Vector: Local network Attack Complexity: Low
Authentication: None required Confidentiality Impact: None
Integrity Impact: Partial Availability Impact: None

Errata information


PlatformErrataRelease Date
Oracle Enterprise Linux version 4 (kernel)ELSA-2006-06892006-11-30
Oracle Enterprise Linux version 4 (ocfs2-2.6.9-42.0.3.0.2.EL)ELSA-2006-06892006-11-30
Oracle Enterprise Linux version 4 (oracleasm-2.6.9-42.0.3.0.2.EL)ELSA-2006-06892006-11-30



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete