CVE-2006-3626

Upstream information

CVE-2006-3626 at MITRE

Description

Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	6.2
Vector	AV:L/AC:H/Au:N/C:C/I:C/A:C
Access Vector	Local
Access Complexity	High
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entry: 192688 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SA:2006:042, published Wed, 26 Jul 2006 14:00:00 +0000
• SUSE-SA:2006:047, published Fri, 11 Aug 2006 17:00:00 +0000
• SUSE-SA:2006:049, published Fri, 18 Aug 2006 16:00:00 +0000
• SUSE-SR:2006:017, published Fri, 21 Jul 2006 17:00:00 +0000

---

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 03:52:54 2013
CVE page last modified: Fri Dec 8 16:17:01 2023