CVE:CVE-2007-6206
CNNVD:CNNVD-200712-014
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 2.4.x版本、2.6.24-rc3及之前的2.6.x版本和其他版本中的fs/exec.c文件的do_coredump函数存在信息泄露漏洞，该漏洞源于程序在将core转储到已有文件时没有正确地验证core dump文件的用户ID。本地攻击者可利用该漏洞获取敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.4.35.2,2.6.24,2.6.24,2.6.24:rc1,2.6.24:rc2,2.6.24:rc3,and avoid the version [2.4.0,2.4.35.2],[2.6.0,2.6.24),2.6.24,2.6.24:rc1,2.6.24:rc2,2.6.24:rc3; Upgrade opensuse opensuse to a higher version than 10.2,10.3,and avoid the version 10.2,10.3; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp1,and avoid the version 10:sp1; Upgrade suse linux_enterprise_real_time_extension to a higher version than 10:sp1,and avoid the version 10:sp1; Upgrade suse linux_enterprise_server to a higher version than 10:sp1,and avoid the version 10:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp1,and avoid the version 10:sp1; Upgrade redhat enterprise_linux_desktop to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_eus to a higher version than 4.6,and avoid the version 4.6; Upgrade redhat enterprise_linux_server to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_workstation to a higher version than 4.0,and avoid the version 4.0; Upgrade debian debian_linux to a higher version than 3.1,4.0,and avoid the version 3.1,4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,7.10,and avoid the version 6.06,6.10,7.04,7.10