The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other applications.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-03T17:00:00

Updated: 2024-08-07T13:42:32.595Z

Reserved: 2007-05-03T00:00:00

Link: CVE-2007-2480

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-05-03T17:19:00.000

Modified: 2023-11-07T02:00:38.073

Link: CVE-2007-2480

cve-icon Redhat

No data.