PT-2006-3052

CVE-2006-2071

·

Published

2006-04-27

·

Updated

2018-10-18

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.x and 2.6.x up to 2.6.16
Description The issue allows local users to bypass IPC permissions and modify a readonly attachment of shared memory. This is achieved by using mprotect to give write permission to the attachment.
Recommendations For Linux kernel versions 2.4.x and 2.6.x up to 2.6.16, consider restricting the use of mprotect to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Related identifiers
RHSA-2006:0689
RHSA-2006_0689
RHSA-2006:0710
Found an issue in the description? Have something to add? Feel free to write us 👾