Description
The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.
References (16)
Core 16
Core References
Vendor Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/281-1/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/25232
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0575.html
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/17830
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=git-commits-head&m=114210002712363&w=2
Various Sources x_refsource_misc
http://selinuxnews.org/wp/index.php/2006/03/13/security-ptrace-bug-cve-2006-1052/
Mailing List mailing-list
x_refsource_mlist
http://marc.info/?l=selinux&m=114226465106131&w=2
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19955
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21465
Vendor Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/22417
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:086
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10102
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/22093
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20157
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1184
Scores
EPSS
0.0043
EPSS Percentile
35.4%
Details
Status
published
Products (8)
linux/linux_kernel
2.6.0 (14 CPE variants)
linux/linux_kernel
2.6.1 (3 CPE variants)
linux/linux_kernel
2.6.6 (4 CPE variants)
linux/linux_kernel
2.6.7 (4 CPE variants)
linux/linux_kernel
2.6.8 (5 CPE variants)
linux/linux_kernel
2.6.8.1
linux/linux_kernel
2.6.8.1.5 (16 CPE variants)
linux/linux_kernel
2.6.9 (3 CPE variants)
Published
May 05, 2006
Tracked Since
Feb 18, 2026