Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-4842
HistoryOct 12, 2006 - 12:07 a.m.

CVE-2006-4842

2006-10-1200:07:00
CWE-20
[email protected]
web.nvd.nist.gov
31
cve-2006-4842
netscape portable runtime
nspr
api
sun solaris 10
setuid programs
environment variables
file overwrite

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.9%

JSON

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

Affected configurations

NVD
Node
netscapeportable_runtime_apiMatch4.6.1
OR
netscapeportable_runtime_apiMatch4.6.2
Node
sunsolarisMatch10.0sparc

Related

seebug 9
exploitpack 5
ubuntucve 1
cvelist 1
canvas 1
packetstorm 1
zdt 1
securityvulns 1
nvd 1
exploitdb 5
nessus 18
seebug
seebug
Solaris 10 libnspr - LD_PRELOAD Arbitrary File Creation Local Root Exploit
2014-07-01 00:00:00
Sun Solaris Netscape Portable Runtime API Local Privilege Escalation Vulnerabili
2008-08-22 00:00:00
Solaris 10 (libnspr) - Arbitrary File Creation Local Root Exploit
2014-07-01 00:00:00
exploitpack
exploitpack
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2)
2006-10-24 00:00:00
Solaris 10 libnspr - Constructor Arbitrary File Creation Privilege Escalation (3)
2006-10-24 00:00:00
Solaris 10 libnspr - LD_PRELOAD Arbitrary File Creation Privilege Escalation (1)
2006-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2006-4842
2006-10-12 00:00:00
cvelist
cvelist
CVE-2006-4842
2006-10-12 00:00:00
canvas
canvas
Immunity Canvas: CVE_2006_4842
2006-10-12 00:07:00
packetstorm
packetstorm
Solaris libnspr NSPR_LOG_FILE Privilege Escalation
2018-09-18 00:00:00
zdt
zdt
Solaris libnspr NSPR_LOG_FILE Privilege Escalation Exploit
2018-09-18 00:00:00
securityvulns
securityvulns
[Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability
2006-10-12 00:00:00
nvd
nvd
CVE-2006-4842
2006-10-12 00:07:00
exploitdb
exploitdb
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2)
2006-10-24 00:00:00
Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (1)
2006-10-13 00:00:00
Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (2)
2006-10-16 00:00:00
nessus
nessus
Solaris 10 (sparc) : 119213-30
2018-03-12 00:00:00
Solaris 10 (x86) : 119214-36
2018-03-12 00:00:00
Solaris 10 (x86) : 119214-32
2018-03-12 00:00:00

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.9%

JSON
Related for CVE-2006-4842
seebug9exploitpack5ubuntucve1cvelist1canvas1packetstorm1zdt1securityvulns1nvd1exploitdb5nessus18