NetSight
IP …
medium4.6

CVE-2005-2555

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unautho…

Impact

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 3.1
LinuxLinux Kernel
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5

Weakness classification

CWE-264

References