1. CVE-Search
  2. CVE-2005-0176
ID CVE-2005-0176
Summary The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.
References
Vulnerable Configurations
  • cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
oval via4
  • accepted 2005-08-18T07:37:00.000-04:00
    class vulnerability
    contributors
    name Jay Beale
    organization Bastille Linux
    description The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.
    family unix
    id oval:org.mitre.oval:def:1225
    status accepted
    submitted 2005-06-29T12:00:00.000-04:00
    title Linux Kernel shmctl() Memory Swap Vulnerability
    version 4
  • accepted 2013-04-29T04:17:53.609-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    • comment The operating system installed on the system is Red Hat Enterprise Linux 4
      oval oval:org.mitre.oval:def:11831
    • comment CentOS Linux 4.x
      oval oval:org.mitre.oval:def:16636
    • comment Oracle Linux 4.x
      oval oval:org.mitre.oval:def:15990
    description The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.
    family unix
    id oval:org.mitre.oval:def:8778
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released.
    version 30
redhat via4
advisories
  • rhsa
    id RHSA-2005:092
  • rhsa
    id RHSA-2005:472
rpms
  • kernel-0:2.6.9-5.0.3.EL
  • kernel-debuginfo-0:2.6.9-5.0.3.EL
  • kernel-devel-0:2.6.9-5.0.3.EL
  • kernel-doc-0:2.6.9-5.0.3.EL
  • kernel-hugemem-0:2.6.9-5.0.3.EL
  • kernel-hugemem-devel-0:2.6.9-5.0.3.EL
  • kernel-smp-0:2.6.9-5.0.3.EL
  • kernel-smp-devel-0:2.6.9-5.0.3.EL
  • kernel-0:2.4.21-32.0.1.EL
  • kernel-BOOT-0:2.4.21-32.0.1.EL
  • kernel-debuginfo-0:2.4.21-32.0.1.EL
  • kernel-doc-0:2.4.21-32.0.1.EL
  • kernel-hugemem-0:2.4.21-32.0.1.EL
  • kernel-hugemem-unsupported-0:2.4.21-32.0.1.EL
  • kernel-smp-0:2.4.21-32.0.1.EL
  • kernel-smp-unsupported-0:2.4.21-32.0.1.EL
  • kernel-source-0:2.4.21-32.0.1.EL
  • kernel-unsupported-0:2.4.21-32.0.1.EL
refmap via4
bid 12598
bugtraq 20050215 [USN-82-1] Linux kernel vulnerabilities
conectiva CLA-2005:930
secunia 19607
sgi 20060402-01-U
Last major update 11-10-2017 - 01:29
Published 15-02-2005 - 05:00
Last modified 11-10-2017 - 01:29
Back to Top