CVE-2006-0228

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active.

Published: Jan 17, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-0228
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
grsecurity / grsecurity_kernel_patch	2.0.1	2.0.1.x
grsecurity / grsecurity_kernel_patch	2.1.5	2.1.5.x
grsecurity / grsecurity_kernel_patch	2.1.1	2.1.1.x
grsecurity / grsecurity_kernel_patch	2.1.7	2.1.7.x
grsecurity / grsecurity_kernel_patch	2.1.2	2.1.2.x
grsecurity / grsecurity_kernel_patch	2.1.4	2.1.4.x
grsecurity / grsecurity_kernel_patch	2.1.3	2.1.3.x
grsecurity / grsecurity_kernel_patch	2.1.0	2.1.0.x
grsecurity / grsecurity_kernel_patch	2.0.2	2.0.2.x
grsecurity / grsecurity_kernel_patch	2.1.6	2.1.6.x

http://secunia.com/advisories/18458
http://www.grsecurity.org/news.php#grsec218
http://www.securityfocus.com/bid/16261
http://www.vupen.com/english/advisories/2006/0199
https://exchange.xforce.ibmcloud.com/vulnerabilities/24156

Vulnerability Database

CVE-2006-0228