NetSight
IP …
low2.1

CVE-2007-6206

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump fil…

Impact

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.4.0 through 2.4.35.2
from 2.6.0 before 2.6.24
Version 2.6.24
OpensuseOpensuse
Versions 10.2, 10.3
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Real Time Extension
Version 10
SuseLinux Enterprise Server
Version 10
SuseLinux Enterprise Software Development Kit
Version 10
RedhatEnterprise Linux Desktop
Version 4.0
RedhatEnterprise Linux Eus
Version 4.6
RedhatEnterprise Linux Server
Version 4.0
RedhatEnterprise Linux Workstation
Version 4.0
DebianDebian Linux
Versions 3.1, 4.0
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04, 7.10

Weakness classification

CWE-200

References