EUVD-2006-1546

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Stack-based buffer overflow in Python 2.4.2 may allow local users to gain privileges on Linux.

Reporter	Title	Published	Views	Family All 23
CVE	CVE-2006-1542	30 Mar 200611:00	–	cve
Cvelist	CVE-2006-1542	30 Mar 200611:00	–	cvelist
Exploit DB	Python 2.4.2 - 'realpath()' Local Stack Overflow	18 Mar 200600:00	–	exploitdb
Microsoft CVE	Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.	21 Oct 202608:03	–	mscve
NVD	CVE-2006-1542	30 Mar 200611:02	–	nvd
osv_azl	AZL-109548 CVE-2006-1542 affecting package python-py 1.11.0-1	30 Mar 200611:02	–	osv_azl
osv_rhsa	RHSA-2008:0264 Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update	15 Sep 202417:19	–	osv_rhsa
osv_rhsa	RHSA-2008:0525 Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update	15 Sep 202417:19	–	osv_rhsa
osv_rhsa	RHSA-2008:0629 Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update	15 Sep 202417:19	–	osv_rhsa
Prion	Stack overflow	30 Mar 200611:02	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "5a593a18-bdf9-3bd4-863e-9e1eb1f82572",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "33a3ab1e-2b52-30be-83e3-89ada131777f",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2006-1542.html
access	www.access.redhat.com/errata/RHSA-2008:0629
access	www.access.redhat.com/errata/RHSA-2008:0525
access	www.access.redhat.com/errata/RHSA-2008:0264
secunia	www.secunia.com/advisories/31492
redhat	www.redhat.com/support/errata/RHSA-2008-0629.html
exploit-db	www.exploit-db.com/exploits/1591
gotfault	www.gotfault.net/research/exploit/gexp-python.py
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 23.7

EPSS0.00908