Oval Definition:oval:org.mitre.oval:def:7446
Revision Date:2014-01-20Version:6
Title:Linux Kernel Do_Coredump Security Bypass Vulnerability
Description:The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2006-6304
Platform(s):VMWare ESX Server 4.0
Product(s):
Definition Synopsis
  • VMware ESX Server 4.0 is installed
  • AND Patch ESX400-201005401-SG is not installed
  • BACK