CVE-2006-3626
Summary
| CVE | CVE-2006-3626 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-07-18 15:46:00 UTC |
| Updated | 2023-11-07 01:59:00 UTC |
| Description | Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | 2.6.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.21 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.22 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.23 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.24 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.21 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.22 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.23 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.24 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.16.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc1 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc2 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc3 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc4 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc5 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17 | rc6 | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.17.4 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Repository / Oval Repository | OVAL | oval.cisecurity.org | |
| USN-319-1: Linux kernel vulnerability | Ubuntu security notices | UBUNTU | usn.ubuntu.com | |
| Ubuntu update for kernel - Advisories - Secunia | SECUNIA | secunia.com | |
| Linux Kernel "/proc" Race Condition Privilege Escalation - Advisories - Secunia | SECUNIA | secunia.com | |
| Linux Kernel PROC Filesystem Local Privilege Escalation Vulnerability | BID | www.securityfocus.com | |
| SUSE update for kernel - Advisories - Secunia | SECUNIA | secunia.com | |
| www.kernel.org/git | www.kernel.org | ||
| Debian -- Security Information -- DSA-1111-2 kernel-source-2.6.8 | DEBIAN | www.debian.org | |
| 404: File not found | CONFIRM | kernel.org | |
| rPath update for kernel - Advisories - Secunia | SECUNIA | secunia.com | |
| Security Announcement | SUSE | www.novell.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| [Full-disclosure] Linux kernel 0day - dynamite inside, don't burn your fingers | FULLDISC | lists.grok.org.uk | |
| Security Announcement | SUSE | www.novell.com | |
| Red Hat update for kernel - Advisories - Secunia | SECUNIA | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| usn/usn-319-2 - Ubuntu: Linux for human beings | UBUNTU | www.ubuntu.com | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | CONFIRM | www.kernel.org | |
| Mandriva update for kernel - Advisories - Secunia | SECUNIA | secunia.com | |
| SUSE update for kernel - Advisories - Secunia | SECUNIA | secunia.com | |
| rhn.redhat.com | Red Hat Support | REDHAT | www.redhat.com | |
| ASA-2006-203 (RHSA-2006-0617) | CONFIRM | support.avaya.com | |
| Debian update for kernel-source - Advisories - Secunia | SECUNIA | secunia.com | |
| Advisories - Mandriva Linux | MANDRIVA | www.mandriva.com | |
| 198973 – CVE-2006-3626 Nasty /proc privilege escalation | CONFIRM | bugzilla.redhat.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| 27120 | OSVDB | www.osvdb.org | |
| Avaya Products Linux Kernel Multiple Vulnerabilities - Advisories - Secunia | SECUNIA | secunia.com | |
| Security Announcement | SUSE | www.novell.com | |
| Security Announcement | SUSE | www.novell.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2006-07-19 | Mark J Cox | This vulnerability does not affect Red Hat Enterprise Linux 2.1 or 3 as they are based on 2.4 kernels. The exploit relies on the kernel supporting the a.out binary format. Red Hat Enterprise Linux 4, Fedora Core 4, and Fedora Core 5 do not support the a.out binary format, causing the exploit to fail. We are not currently aware of any way to exploit this vulnerability if a.out binary format is not enabled. In addition, a default installation of these OS enables SELinux in enforcing mode. SELinux also completely blocks attempts to exploit this issue. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=198973#c10 |
There are currently no legacy QID mappings associated with this CVE.