Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-5072HistoryOct 10, 2006 - 4:06 a.m.
CVE-2006-5072
2006-10-1004:06:00
Debian Security Bug Tracker
security-tracker.debian.org
5
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
12.7%
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mono | < 1.1.17.1-5 | mono_1.1.17.1-5_all.deb |
| Debian | 11 | all | mono | < 1.1.17.1-5 | mono_1.1.17.1-5_all.deb |
| Debian | 999 | all | mono | < 1.1.17.1-5 | mono_1.1.17.1-5_all.deb |
| Debian | 13 | all | mono | < 1.1.17.1-5 | mono_1.1.17.1-5_all.deb |
Related
nessus
nessus
Fedora Core 5 : mono-1.1.13.7-2.fc5.1 (2006-1012)
2007-01-17 00:00:00
Ubuntu 5.10 / 6.06 LTS : mono vulnerability (USN-357-1)
2007-11-10 00:00:00
SUSE-SA:2006:073: mono-core
2007-02-18 00:00:00
cvelist
cvelist
CVE-2006-5072
2006-10-05 23:00:00
gentoo
gentoo
Mono: Insecure temporary file creation
2006-11-28 00:00:00
nvd
nvd
CVE-2006-5072
2006-10-10 04:06:00
openvas
openvas
Gentoo Security Advisory GLSA 200611-23 (mono)
2008-09-24 00:00:00
FreeBSD Ports: mono
2008-09-04 00:00:00
FreeBSD Ports: mono
2008-09-04 00:00:00
ubuntu
ubuntu
Mono vulnerability
2006-10-05 00:00:00
cve
cve
CVE-2006-5072
2006-10-10 04:06:00
ubuntucve
ubuntucve
CVE-2006-5072
2006-10-10 00:00:00
freebsd
freebsd
mono -- "System.CodeDom.Compiler" Insecure Temporary Creation
2006-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: mono-1.1.13.7-3.fc5.1
2007-01-12 19:43:55
suse
suse
local privilege escalation in mono-core
2006-12-01 17:34:31
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
12.7%
Related for DEBIANCVE:CVE-2006-5072