CVE-2006-3815 describes an insecure permissions vulnerability in heartbeat.c within Linux-HA Heartbeat versions prior to 2.0.6. This flaw allows local users to cause an unspecified denial of service by exploiting insecure permissions set during a shmget call for shared memory. The vulnerability has a low CVSS score of 2.1, indicating a low severity with local access and low attack complexity, primarily leading to partial availability impact. While an ExploitDB entry exists (EDB-28287) detailing the insecure permissions, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.5CPE matchmatch criteria | cpe:2.3:a:linux-ha:heartbeat:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.