CVE-2006-2451

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.39% chance of exploitation in the next 30 days, 91th percentile

Published

2006-07-07

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.securityfocus.com/archive/1/440117/100/0/threaded
• http://www.securityfocus.com/archive/1/439869/100/0/threaded

ExploitDB entries (5)

• https://www.exploit-db.com/exploits/2031
• https://www.exploit-db.com/exploits/2011
• https://www.exploit-db.com/exploits/2006
• https://www.exploit-db.com/exploits/2005
• https://www.exploit-db.com/exploits/2004

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2006/CVE-2006-2451

References

• CVE Record
• NVD entry

Related

• CVE-2006-2447
• CVE-2006-2458
• CVE-2006-2444
• CVE-2006-2459
• CVE-2006-2439
• CVE-2006-2460