BUGTRAQ ID: 26701
CVE ID:CVE-2007-6206
CNCVE ID:CNCVE-20076206
Linux是一款开放源代码的操作系统。
Linux内核DO_COREDUMP存在设计错误,本地攻击者可以利用漏洞获得敏感信息。
在内核2.6.x和2.4.x中,如果属于非ROOT用户的CORE文件存在,并ROOT运行一个进程产生CORE释放在相同位置,那么原来属于非ROOT用户的CORE文件将被ROOT的CORE文件替代,导致敏感信息泄露。
Linux kernel 2.6.24 -rc3
Linux kernel 2.6.23 .8
Linux kernel 2.6.23 .7
Linux kernel 2.6.23 .6
Linux kernel 2.6.23 .5
Linux kernel 2.6.23 .4
Linux kernel 2.6.23 .3
Linux kernel 2.6.23 .2
Linux kernel 2.6.23 -rc2
Linux kernel 2.6.23 -rc1
Linux kernel 2.6.23
Linux kernel 2.6.22 7
Linux kernel 2.6.22 1
Linux kernel 2.6.22 .8
Linux kernel 2.6.22 .6
Linux kernel 2.6.22 .5
Linux kernel 2.6.22 .4
Linux kernel 2.6.22 .3
Linux kernel 2.6.22 .11
Linux kernel 2.6.22
Linux kernel 2.6.22
Linux kernel 2.6.21 4
Linux kernel 2.6.21 .7
Linux kernel 2.6.21 .6
Linux kernel 2.6.21 .2
Linux kernel 2.6.21 .1
Linux kernel 2.6.21
Linux kernel 2.6.21
Linux kernel 2.6.20 .9
Linux kernel 2.6.20 .8
Linux kernel 2.6.20 .5
Linux kernel 2.6.20 .4
Linux kernel 2.6.20 .15
Linux kernel 2.6.20
Linux kernel 2.6.20
Linux kernel 2.6.19 1
Linux kernel 2.6.19 .2
Linux kernel 2.6.19 .1
Linux kernel 2.6.19 -rc4
可采用如下补丁:
Linux kernel 2.6.20.2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.21-RC3
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.11.4
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.20-rc2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.20-2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.20.3
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.8.1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.15-27.48
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.24-rc1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6 -test4
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6 -test9
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6 -test10
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.10 rc2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.11 -rc3
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.11 .11
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.11 .7
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.12 .1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.12 -rc4
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.12 .22
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.12 .2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.13
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.14 .1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.15
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.15
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.15 -rc3
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.15
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.16 .9
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.16 .1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.17 .13
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.17 .10
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.17 -rc5
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.19 -rc2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.19
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.20
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.21
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.22 .4
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.22 .11
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.23 -rc1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.23 -rc2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.24 -rc3
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.6 rc1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.7
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.8 rc2
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
Linux kernel 2.6.8 rc1
Linux patch-2.6.24-rc4.bz2
<a href=“http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.” target=“_blank”>http://kernel.org/diff/diffview.cgi?file=%2Fpub%2Flinux%2Fkernel%2Fv2.</a> 6%2Ftesting%2Fpatch-2.6.24-rc4.bz2
trew@uber:~/tmp/q$ ./t
Segmentation fault (core dumped)
trew@uber:~/tmp/q$ md5sum core
90b29a1012aa00c34a18947d98f1b1fb core
trew@uber:~/tmp/q$ ls -l core
-rw-