CVE-2006-4124

2006-08-1423:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.

References

karol.wiesek.pl/files/lesstif-advisory.pdf

secunia.com/advisories/21428

www.securityfocus.com/bid/19430

www.vupen.com/english/advisories/2006/3230

exchange.xforce.ibmcloud.com/vulnerabilities/28298

www.exploit-db.com/exploits/2144