Vulnerability Name:

CVE-2006-0038 (CCN-25400)

Assigned:2005-12-20
Published:2006-03-21
Updated:2023-02-13
Summary:Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
CVSS v3 Severity:8.2 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2006-0038

Source: CCN
Type: RHSA-2006-0575
Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4

Source: CCN
Type: SA19330
Linux Kernel Netfilter Weakness and Four Vulnerabilities

Source: CCN
Type: SA22417
Avaya Products Linux Kernel Multiple Vulnerabilities

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: ASA-2006-200
Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4 (RHSA-2006-0575)

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: DEBIAN
Type: DSA-1097
kernel-source-2.4.27 -- several vulnerabilities

Source: DEBIAN
Type: DSA-1103
kernel-source-2.6.8 -- several vulnerabilities

Source: CCN
Type: The The Linux Kernel Archives Web site
The Linux Kernel Archives

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: The Linux Kernel Archives
ChangeLog-2.6.16

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: BID-17178
Linux Kernel Netfilter Do_Replace Local Buffer Overflow Vulnerability

Source: secalert@redhat.com
Type: Patch
secalert@redhat.com

Source: CCN
Type: TLSA-2007-2
Two vulnerabilities discovered in kernel

Source: CCN
Type: USN-302-1
Linux kernel vulnerabilities

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: XF
Type: UNKNOWN
linux-netfilter-doreplace-overflow(25400)

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Vulnerable Configuration:Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*
    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.2:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.16:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.15:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13:rc7:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13:rc6:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12:rc1:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.0:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.1:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.10:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.3:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.4:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.5:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.6:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.7:-:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*
  • OR cpe:/o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*
  • AND
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:10945
    V
    		Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
    2013-04-29
    oval:com.redhat.rhsa:def:20060575
    P
    		RHSA-2006:0575: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4 (Important)
    2008-03-20
    oval:org.debian:def:1103
    V
    		several vulnerabilities
    2006-06-27
    oval:org.debian:def:1097
    V
    		several vulnerabilities
    2006-06-14
    BACK
    linux linux kernel 2.6.14.4
    linux linux kernel 2.6.6 rc1
    linux linux kernel 2.6.14.3
    linux linux kernel 2.6.15.1
    linux linux kernel 2.6.15
    linux linux kernel 2.6.14
    linux linux kernel 2.6.2
    linux linux kernel 2.6.0 test9
    linux linux kernel 2.6.0 test8
    linux linux kernel 2.6.0 test7
    linux linux kernel 2.6.0 test6
    linux linux kernel 2.6.0 test5
    linux linux kernel 2.6.0 test4
    linux linux kernel 2.6.0 test3
    linux linux kernel 2.6.0 test2
    linux linux kernel 2.6.0 test11
    linux linux kernel 2.6.0 test10
    linux linux kernel 2.6.0 test1
    linux linux kernel 2.6.8 rc3
    linux linux kernel 2.6.8 rc2
    linux linux kernel 2.6.8 rc1
    linux linux kernel 2.6.7 rc1
    linux linux kernel 2.6.1 rc2
    linux linux kernel 2.6.1 rc1
    linux linux kernel 2.6.16 rc1
    linux linux kernel 2.6.15 rc3
    linux linux kernel 2.6.14 rc2
    linux linux kernel 2.6.15 rc1
    linux linux kernel 2.6.15.5
    linux linux kernel 2.6.15.4
    linux linux kernel 2.6.15.3
    linux linux kernel 2.6.15.2
    linux linux kernel 2.6.15 rc2
    linux linux kernel 2.6.14 rc4
    linux linux kernel 2.6.14 rc3
    linux linux kernel 2.6.14 rc1
    linux linux kernel 2.6.14.5
    linux linux kernel 2.6.14.2
    linux linux kernel 2.6.14.1
    linux linux kernel 2.6.13 rc7
    linux linux kernel 2.6.13 rc6
    linux linux kernel 2.6.13 rc4
    linux linux kernel 2.6.13 rc1
    linux linux kernel 2.6.12 rc5
    linux linux kernel 2.6.12 rc4
    linux linux kernel 2.6.12 rc1
    linux linux kernel 2.6.11 rc4
    linux linux kernel 2.6.11 rc3
    linux linux kernel 2.6.11 rc2
    linux linux kernel 2.6.10 rc2
    linux linux kernel 2.6.0
    linux linux kernel 2.6.1
    linux linux kernel 2.6.10
    linux linux kernel 2.6.11
    linux linux kernel 2.6.11.11
    linux linux kernel 2.6.11.12
    linux linux kernel 2.6.11.5
    linux linux kernel 2.6.11.6
    linux linux kernel 2.6.11.7
    linux linux kernel 2.6.11.8
    linux linux kernel 2.6.12.1
    linux linux kernel 2.6.12.2
    linux linux kernel 2.6.12.3
    linux linux kernel 2.6.12.4
    linux linux kernel 2.6.12.5
    linux linux kernel 2.6.12.6
    linux linux kernel 2.6.13
    linux linux kernel 2.6.13.1
    linux linux kernel 2.6.13.2
    linux linux kernel 2.6.13.3
    linux linux kernel 2.6.13.4
    linux linux kernel 2.6.3
    linux linux kernel 2.6.4
    linux linux kernel 2.6.5
    linux linux kernel 2.6.6
    linux linux kernel 2.6.7
    linux linux kernel 2.6.8
    linux linux kernel 2.6.9
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    debian debian linux 3.1
    canonical ubuntu 6.06