Information disclosure in Linux Kernel
CVE-2007-6206
The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.
Vulnerability class: Information Disclosure
EPSS: 0.004 (34.9th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.6.24
- Canonical Ubuntu_linux — versions 6.06, 6.10, 7.04
- Debian Debian_linux — versions 3.1, 4.0
- Opensuse — versions 10.2, 10.3
- Redhat Enterprise_linux_desktop — versions 4.0
- Redhat Enterprise_linux_eus — versions 4.6
- Redhat Enterprise_linux_server — versions 4.0
- Redhat Enterprise_linux_workstation — versions 4.0
- Suse Linux_enterprise_desktop — versions 10
- Suse Linux_enterprise_real_time_extension — versions 10
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)