Lucene search
HistoryNov 17, 2006 - 11:07 p.m.
CVE-2006-5969
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
25.6%
CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directory name, which is not properly handled by fvwm-menu-directory, a variant of CVE-2003-1308.
Affected configurations
Node
fvwmfvwmRange≤2.5.18
Related
ubuntucve
ubuntucve
CVE-2006-5969
2006-11-17 00:00:00
redhatcve
redhatcve
CVE-2006-5969
2015-10-30 09:21:06
CVE-2003-1308
2015-10-30 09:29:45
cve
cve
CVE-2006-5969
2006-11-17 23:07:00
CVE-2003-1308
2022-10-03 16:15:42
debiancve
debiancve
CVE-2006-5969
2006-11-17 23:07:00
CVE-2003-1308
2022-10-03 16:15:42
cvelist
cvelist
CVE-2006-5969
2006-11-17 23:00:00
CVE-2003-1308
2022-10-03 16:15:42
nvd
nvd
CVE-2003-1308
2003-12-31 05:00:00
nessus
nessus
GLSA-200611-17 : fvwm: fvwm-menu-directory fvwm command injection
2006-11-27 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200611-17 (fvwm)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200611-17 (fvwm)
2008-09-24 00:00:00
gentoo
gentoo
fvwm: fvwm-menu-directory fvwm command injection
2006-11-23 00:00:00
securityvulns
securityvulns
[ GLSA 200611-17 ] fvwm: fvwm-menu-directory fvwm command injection
2006-11-25 00:00:00
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
25.6%
Related for NVD:CVE-2006-5969