CVEvulnerability

CVE-2007-6206

2.1 LOW Published 2007-12-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

Affected configurations

• linux linux kernel (>= 2.4.0 <= 2.4.35.2) • linux linux kernel (>= 2.6.0 < 2.6.24) • linux linux kernel 2.6.24 • opensuse opensuse 10.2 • opensuse opensuse 10.3 • suse linux enterprise desktop 10 • suse linux enterprise real time extension 10 • suse linux enterprise server 10 • suse linux enterprise software development kit 10 • redhat enterprise linux desktop 4.0 • redhat enterprise linux eus 4.6 • redhat enterprise linux server 4.0 • redhat enterprise linux workstation 4.0 • debian debian linux 3.1 • debian debian linux 4.0 • canonical ubuntu linux 6.06 • canonical ubuntu linux 6.10 • canonical ubuntu linux 7.04 • canonical ubuntu linux 7.10

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References