[Full-disclosure] rPSA-2006-0122-1 kernel



rPath Security Advisory: 2006-0122-1
Published: 2006-07-07
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
Local Deterministic Denial of Service
Updated Versions:
kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1

References:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2451
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2934
https://issues.rpath.com/browse/RPL-488

Description:
Previous versions of the kernel package are vulnerable to two denial
of service attacks. The first allows any local user to fill up file
systems by causing core dumps to write to directories to which they
do not have write access permissions. The second applies only to
systems using the SCTP protocol, which is not enabled by default,
and the tools required to configure it (lksctp-tools) are not included
in rPath Linux. This vulnerability, which cannot apply to systems
without lksctp-tools installed, enables a remote denial of service
attack in which specially-crafted packets can crash the system.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • rPSA-2006-0122-2 kernel
    ... Local Root Deterministic Privilege Escalation ... The first vulnerability allows any local user to fill up file ... to configure it are not included in rPath Linux. ... enables a remote denial of service attack ...
    (Bugtraq)
  • [Full-disclosure] rPSA-2006-0122-2 kernel
    ... Local Root Deterministic Privilege Escalation ... The first vulnerability allows any local user to fill up file ... to configure it are not included in rPath Linux. ... enables a remote denial of service attack ...
    (Full-Disclosure)
  • rPSA-2006-0122-1 kernel
    ... Products: rPath Linux 1 ... of service attacks. ... This vulnerability, ... enables a remote denial of service ...
    (Bugtraq)
  • [Full-disclosure] rPSA-2006-0173-1 openoffice.org
    ... Indirect User Deterministic Unauthorized Access ... crash) and a user-complicit unauthorized access attack that enables ... Because Java support could not be disabled in the initial release ... within rPath Linux 1, this update was delayed until non-Java builds ...
    (Full-Disclosure)
  • rPSA-2006-0173-1 openoffice.org
    ... Indirect User Deterministic Unauthorized Access ... crash) and a user-complicit unauthorized access attack that enables ... Because Java support could not be disabled in the initial release ... within rPath Linux 1, this update was delayed until non-Java builds ...
    (Bugtraq)