Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-5072
HistoryOct 10, 2006 - 12:00 a.m.

CVE-2006-5072

2006-10-1000:00:00
ubuntu.com
ubuntu.com
8

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

12.7%

The System.CodeDom.Compiler classes in Novell Mono create temporary files
with insecure permissions, which allows local users to overwrite arbitrary
files or execute arbitrary code via a symlink attack.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmono< 1.1.13.6-0ubuntu3.2UNKNOWN
ubuntu6.10noarchmono< 1.1.17.1-1ubuntu7.1UNKNOWN
ubuntu7.04noarchmono< 1.2.3.1-1ubuntu1UNKNOWN

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

12.7%