Heartbeat Shared Memory Error Lets Local Users Deny Service
|
|
SecurityTracker Alert ID: 1016602
|
|
SecurityTracker URL: http://securitytracker.com/id?1016602
|
|
CVE Reference: CVE-2006-3815
(Links to External Site)
|
Date: Jul 28 2006
|
Impact: Denial of service via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 2.0.6
|
Description: A vulnerability was reported in Heartbeat. A local user can cause denial of service conditions.
The vulnerability resides in 'heartbeat.c', where a shmget() function call for shared memory is made with insecure permissions.
|
Impact: A local user can cause denial of service conditions on the target system.
|
Solution: The vendor has issued a fixed version (2.0.6).
|
Vendor URL: linux-ha.org/Heartbeat (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 28 Jul 2006 01:54:45 -0400
Subject: heartbeat vulnerability
|
CVE-2006-3815
http://www.mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html
http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514
|
|
