NetSight
IP …
low2.1Public exploit code

CVE-2009-0676

The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.28.5
Versions 2.6, 2.6.0, 2.6.1, 2.6.2, 2.6.3

Weakness classification

CWE-264

References