QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-0096

Back to search

CVE-2006-0096

Published: Jan 6, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels.

VendorProductVersions

n/a

n/a

affected
n/a

References

16304
vdb-entry
x_refsource_BID
18977
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:044
vendor-advisory
x_refsource_MANDRIVA
DSA-1017
vendor-advisory
x_refsource_DEBIAN
USN-244-1
vendor-advisory
x_refsource_UBUNTU
18527
third-party-advisory
x_refsource_SECUNIA
19374
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now