CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Resource Management Errors
Summary: the suid_dumpable support in linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the pr_set_dumpable argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2006-07-07
Last Modified Date: 2018-10-18