{ "schema_version": "1.4.0", "id": "GHSA-h3q8-4j28-c8m2", "modified": "2025-04-03T04:24:40Z", "published": "2022-05-01T06:37:24Z", "aliases": [ "CVE-2006-0096" ], "details": "wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0096" }, { "type": "WEB", "url": "https://usn.ubuntu.com/244-1" }, { "type": "WEB", "url": "http://linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c" }, { "type": "WEB", "url": "http://linux.bkbits.net:8080/linux-2.4/cset@1.1448.91.23?nav=index.html|src/|src/drivers|src/drivers/net|src/drivers/net/wan|related/drivers/net/wan/sdla.c" }, { "type": "WEB", "url": "http://secunia.com/advisories/18527" }, { "type": "WEB", "url": "http://secunia.com/advisories/18977" }, { "type": "WEB", "url": "http://secunia.com/advisories/19374" }, { "type": "WEB", "url": "http://www.debian.org/security/2006/dsa-1017" }, { "type": "WEB", "url": "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f" }, { "type": "WEB", "url": "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git;a=commitdiff;h=0f1d4813a4a65296e1131f320a60741732bc068f" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/16304" }, { "type": "WEB", "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2006-01-06T11:03:00Z" } }