Lucene search
HistoryAug 14, 2006 - 11:04 p.m.
CVE-2006-4124
cve
2006
4124
lesstif
libxm
debug_file
environment variable
privilege escalation
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.
Affected configurations
Node
lesstiflesstifRange≤0.95.0
ORlesstiflesstifMatch0.93.94
| CPE | Name | Operator | Version |
|---|---|---|---|
| lesstif:lesstif | lesstif | le | 0.95.0 |
| lesstif:lesstif | lesstif | eq | 0.93.94 |
Related
redhatcve
redhatcve
CVE-2006-4124
2015-10-30 10:18:39
ubuntucve
ubuntucve
CVE-2006-4124
2006-08-14 00:00:00
nvd
nvd
CVE-2006-4124
2006-08-14 23:04:00
cvelist
cvelist
CVE-2006-4124
2006-08-14 23:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2006-4124