Oval Definition:	oval:org.mitre.oval:def:10891
Revision Date: 2013-04-29 Version: 11 Title: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field. Description: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-6106 Platform(s): CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section kernel-hugemem is earlier than 0:2.6.9-42.0.8.EL OR kernel-hugemem-devel is earlier than 0:2.6.9-42.0.8.EL OR kernel-smp-devel is earlier than 0:2.6.9-42.0.8.EL OR kernel-largesmp-devel is earlier than 0:2.6.9-42.0.8.EL OR kernel is earlier than 0:2.6.9-42.0.8.EL OR kernel-devel is earlier than 0:2.6.9-42.0.8.EL OR kernel-doc is earlier than 0:2.6.9-42.0.8.EL OR kernel-largesmp is earlier than 0:2.6.9-42.0.8.EL OR kernel-smp is earlier than 0:2.6.9-42.0.8.EL
BACK