National Cyber Awareness System

Vulnerability Summary for CVE-2006-1343

Overview

net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MLIST

Name: [linux-netdev] 20060304 BUG: Small information leak in SO_ORIGINAL_DST (2.4 and 2.6) and

Type: Patch Information; Exploit

Hyperlink:http://marc.theaimsgroup.com/?l=linux-netdev&m=114148078223594&w=2

External Source: VUPEN

Name: ADV-2006-4502

Hyperlink:http://www.vupen.com/english/advisories/2006/4502

External Source: VUPEN

Name: ADV-2006-2071

Hyperlink:http://www.vupen.com/english/advisories/2006/2071

External Source: OVAL

Name: oval:org.mitre.oval:def:10875

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10875

External Source: XF

Name: linux-sockaddr-memory-leak(25425)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25425

External Source: CONFIRM

Name: http://www.vmware.com/download/esx/esx-254-200610-patch.html

Hyperlink:http://www.vmware.com/download/esx/esx-254-200610-patch.html

External Source: CONFIRM

Name: http://www.vmware.com/download/esx/esx-213-200610-patch.html

Hyperlink:http://www.vmware.com/download/esx/esx-213-200610-patch.html

External Source: CONFIRM

Name: http://www.vmware.com/download/esx/esx-202-200610-patch.html

Hyperlink:http://www.vmware.com/download/esx/esx-202-200610-patch.html

External Source: UBUNTU

Name: USN-281-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-281-1

External Source: TRUSTIX

Name: 2006-0032

Hyperlink:http://www.trustix.org/errata/2006/0032/

External Source: BID

Name: 17203

Hyperlink:http://www.securityfocus.com/bid/17203

External Source: BUGTRAQ

Name: 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/451426/100/200/threaded

External Source: BUGTRAQ

Name: 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/451419/100/200/threaded

External Source: BUGTRAQ

Name: 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/451417/100/200/threaded

External Source: BUGTRAQ

Name: 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/451404/100/0/threaded

External Source: BUGTRAQ

Name: 20060531 rPSA-2006-0087-1 kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/435490/100/0/threaded

External Source: REDHAT

Name: RHSA-2006:0580

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0580.html

External Source: REDHAT

Name: RHSA-2006:0579

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0579.html

External Source: REDHAT

Name: RHSA-2006:0575

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0575.html

External Source: REDHAT

Name: RHSA-2006:0437

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0437.html

External Source: OSVDB

Name: 29841

Hyperlink:http://www.osvdb.org/29841

External Source: MANDRIVA

Name: MDKSA-2006:150

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

External Source: MANDRIVA

Name: MDKSA-2006:123

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:123

External Source: DEBIAN

Name: DSA-1184

Hyperlink:http://www.debian.org/security/2006/dsa-1184

External Source: DEBIAN

Name: DSA-1097

Hyperlink:http://www.debian.org/security/2006/dsa-1097

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm

External Source: SECUNIA

Name: 22875

Hyperlink:http://secunia.com/advisories/22875

External Source: SECUNIA

Name: 22417

Hyperlink:http://secunia.com/advisories/22417

External Source: SECUNIA

Name: 22093

Hyperlink:http://secunia.com/advisories/22093

External Source: SECUNIA

Name: 21983

Hyperlink:http://secunia.com/advisories/21983

External Source: SECUNIA

Name: 21465

Hyperlink:http://secunia.com/advisories/21465

External Source: SECUNIA

Name: 21136

Hyperlink:http://secunia.com/advisories/21136

External Source: SECUNIA

Name: 21045

Hyperlink:http://secunia.com/advisories/21045

External Source: SECUNIA

Name: 20671

Hyperlink:http://secunia.com/advisories/20671

External Source: SECUNIA

Name: 19955

Hyperlink:http://secunia.com/advisories/19955

External Source: SECUNIA

Name: 19357

Hyperlink:http://secunia.com/advisories/19357

References to Check Content

Identifier:oval:org.mitre.oval:def:10875

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10875