Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.6
CVSSv2

CVE-2005-2709

Published: 20/11/2005 Updated: 19/10/2018
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Linux

Vulnerability Summary

The sysctl functionality (sysctl.c) in Linux kernel prior to 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.13.4

linux linux kernel 2.6.13.3

linux linux kernel 2.6.12.3

linux linux kernel 2.6.12.2

linux linux kernel 2.6.11.4

linux linux kernel 2.6.11.3

linux linux kernel 2.6.10

linux linux kernel 2.6.1

linux linux kernel 2.4.36.2

linux linux kernel 2.4.33

linux linux kernel 2.4.35.3

linux linux kernel 2.4.36.7

linux linux kernel 2.4.37.1

linux linux kernel 2.4.37

linux linux kernel 2.4.21

linux linux kernel 2.4.23

linux linux kernel 2.4.19

linux linux kernel 2.4.29

linux linux kernel 2.4.27

linux linux kernel 2.4.37.2

linux linux kernel 2.4.18

linux linux kernel 2.4.10

linux linux kernel 2.4.11

linux linux kernel 2.4.37.6

linux linux kernel 2.4.15

linux linux kernel 2.4.35.5

linux linux kernel 2.4.35.1

linux linux kernel 2.4.34.2

linux linux kernel 2.4.31

linux linux kernel

linux linux kernel 2.6.13.5

linux linux kernel 2.6.12.5

linux linux kernel 2.6.12.4

linux linux kernel 2.6.11.7

linux linux kernel 2.6.11.6

linux linux kernel 2.6.11.5

linux linux kernel 2.6.11.1

linux linux kernel 2.6.11

linux linux kernel 2.4.36

linux linux kernel 2.4.36.3

linux linux kernel 2.4.30

linux linux kernel 2.4.33.3

linux linux kernel 2.4.33.4

linux linux kernel 2.4.28

linux linux kernel 2.4.25

linux linux kernel 2.4.26

linux linux kernel 2.6.13.2

linux linux kernel 2.6.13.1

linux linux kernel 2.6.12.1

linux linux kernel 2.6.12

linux linux kernel 2.6.11.2

linux linux kernel 2.6.11.12

linux linux kernel 2.6.0

linux linux kernel 2.4.36.4

linux linux kernel 2.4.32

linux linux kernel 2.4.33.2

linux linux kernel 2.4.34

linux linux kernel 2.4.36.8

linux linux kernel 2.4.20

linux linux kernel 2.4.22

linux linux kernel 2.4.5

linux linux kernel 2.4.4

linux linux kernel 2.4.37.3

linux linux kernel 2.4.16

linux linux kernel 2.4.36.9

linux linux kernel 2.4.34.5

linux linux kernel 2.4.35.2

linux linux kernel 2.4.3

linux linux kernel 2.4.33.1

linux linux kernel 2.4.9

linux linux kernel 2.4.12

linux linux kernel 2.4.13

linux linux kernel 2.4.37.5

linux linux kernel 2.4.14

linux linux kernel 2.4.34.4

linux linux kernel 2.4.35.4

linux linux kernel 2.4.2

linux linux kernel 2.4.34.1

linux linux kernel 2.2.27

linux linux kernel 2.6.13

linux linux kernel 2.6.12.6

linux linux kernel 2.6.11.9

linux linux kernel 2.6.11.8

linux linux kernel 2.6.11.11

linux linux kernel 2.6.11.10

linux linux kernel 2.4.36.5

linux linux kernel 2.4.36.1

linux linux kernel 2.4.33.5

linux linux kernel 2.4.33.7

linux linux kernel 2.4.36.6

linux linux kernel 2.4.24

linux linux kernel 2.4.6

linux linux kernel 2.4.37.4

linux linux kernel 2.4.17

linux linux kernel 2.4.34.6

linux linux kernel 2.4.34.3

linux linux kernel 2.4.1

linux linux kernel 2.4.8

linux linux kernel 2.4.7

Vendor Advisories

Red Hat: kernel security update
Synopsis kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues in the Red HatEnterprise Linux 4 kernel are now available This security advisory has been rated as having important security impactby the Red Hat Security Response Team ...
Ubuntu Security Notice: linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities
The problem can be corrected by updating your system to the following package versions: ...
Debian Security Advisories: DSA-1017-1 kernel-source-2.6.8 -- several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2004-1017 Multiple overflows exist in the io_edgeport driver which might be usable as a denial of ...
Debian Security Advisories: DSA-1018-2 kernel-source-2.4.27 -- several vulnerabilities
The original update lacked recompiled ALSA modules against the new kernel ABI Furthermore, kernel-latest-24-sparc now correctly depends on the updated packages For completeness we're providing the original problem description: Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service ...

Exploits

Exploit DB: Linux Kernel 2.6.x - Sysctl Unregistration Local Denial of Service
/* source: wwwsecurityfocuscom/bid/15365/info Linux Kernel is reported prone to a local denial-of-service vulnerability This issue arises from a failure to properly unregister kernel resources when network devices are removed This issue allows local attackers to deny service to legitimate users Attackers may also be able to execute ar ...

References

CWE-399http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1http://secunia.com/advisories/17504http://www.securityfocus.com/bid/15365http://www.osvdb.org/20676http://secunia.com/advisories/17541http://secunia.com/advisories/17648http://securitytracker.com/id?1015434http://www.redhat.com/support/errata/RHSA-2006-0101.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0140.htmlhttp://secunia.com/advisories/18510http://secunia.com/advisories/18562http://www.redhat.com/support/errata/RHSA-2006-0190.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0191.htmlhttp://secunia.com/advisories/18684http://www.debian.org/security/2006/dsa-1017http://www.debian.org/security/2006/dsa-1018http://secunia.com/advisories/19374http://secunia.com/advisories/19369http://www.mandriva.com/security/advisories?name=MDKSA-2006:059http://www.vupen.com/english/advisories/2005/2359https://exchange.xforce.ibmcloud.com/vulnerabilities/23040https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746https://usn.ubuntu.com/219-1/http://www.securityfocus.com/archive/1/428058/100/0/threadedhttp://www.securityfocus.com/archive/1/428028/100/0/threadedhttp://www.securityfocus.com/archive/1/427981/100/0/threadedhttp://www.securityfocus.com/archive/1/427980/100/0/threadedhttps://access.redhat.com/errata/RHSA-2006:0101https://usn.ubuntu.com/219-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/26489/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook