Lucene search
HistoryMay 04, 2006 - 12:38 p.m.
CVE-2006-2183
vulnerability
truecrypt
linux
suid root
path environment variable
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.
Affected configurations
Node
truecrypt_foundationtruecryptMatch4.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| truecrypt_foundation:truecrypt | truecrypt foundation truecrypt | eq | 4.1 |
Related
nvd
nvd
CVE-2006-2183
2006-05-04 12:38:00
cvelist
cvelist
CVE-2006-2183
2006-05-04 10:00:00
prion
prion
Design/Logic Flaw
2006-05-04 12:38:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.9%
Related for CVE-2006-2183