National Cyber Awareness System

Vulnerability Summary for CVE-2006-3815

Overview

heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html

Type: Patch Information

Hyperlink:http://www.mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html

External Source: CONFIRM

Name: http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514

Type: Patch Information

Hyperlink:http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514

External Source: VUPEN

Name: ADV-2006-2994

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/2994

External Source: UBUNTU

Name: USN-326-1

Hyperlink:http://www.ubuntu.com/usn/usn-326-1

External Source: BID

Name: 19186

Hyperlink:http://www.securityfocus.com/bid/19186

External Source: MANDRIVA

Name: MDKSA-2006:142

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:142

External Source: CONFIRM

Name: http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt

Hyperlink:http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt

External Source: DEBIAN

Name: DSA-1128

Hyperlink:http://www.debian.org/security/2006/dsa-1128

External Source: SECTRACK

Name: 1016602

Hyperlink:http://securitytracker.com/id?1016602

External Source: GENTOO

Name: GLSA-200608-23

Hyperlink:http://security.gentoo.org/glsa/glsa-200608-23.xml

External Source: SECUNIA

Name: 21629

Type: Advisory

Hyperlink:http://secunia.com/advisories/21629

External Source: SECUNIA

Name: 21521

Type: Advisory

Hyperlink:http://secunia.com/advisories/21521

External Source: SECUNIA

Name: 21240

Type: Advisory

Hyperlink:http://secunia.com/advisories/21240

External Source: SECUNIA

Name: 21231

Type: Advisory

Hyperlink:http://secunia.com/advisories/21231

External Source: SECUNIA

Name: 21162

Type: Advisory

Hyperlink:http://secunia.com/advisories/21162