CVE-2007-6206

Published Dec 4, 2007

Last updated a year ago

Overview

Description: The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91D6F35D-14A9-4F0B-816F-B89F7AAA3A20",
            "versionEndIncluding": "2.4.35.2",
            "versionStartIncluding": "2.4.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D7B67565-ADA8-46B9-B3E0-2100CD53EE67",
            "versionEndExcluding": "2.6.24",
            "versionStartIncluding": "2.6.0"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.24:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6F3E61F3-1CF1-4176-94CD-89A408BCFC96"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "085259B8-9D41-42B0-B32B-66B8D365F106"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9A12DE15-E192-4B90-ADB7-A886B3746DD7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FF6588E7-F4FA-40F5-8945-FC7B6094376E"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24818450-FDA1-429A-AC17-68F44F584217"
          },
          {
            "criteria": "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C35B68DF-1440-4587-8458-9C5F4D1E43F3"
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C8FC5E32-C9E3-49F6-9481-1DB60DEE8A07"
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_real_time_extension:10:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E2120267-502B-4662-96BA-F32289F64B0F"
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "29184B59-5756-48DB-930C-69D5CD628548"
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "33EB57D5-DE8D-417C-8C00-AD331D61181C"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D74A418-50F0-42C0-ABBC-BBBE718FF025"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:4.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F81695D5-64C0-42B7-A048-1309C908F943"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73322DEE-27A6-4D18-88A3-ED7F9CAEABD5"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B5DCF29-6830-45FF-BC88-17E2249C653D"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References