CVE

Id
20228  
CVE No.
CVE-2006-4124  
Status
Candidate  
Description
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187556 20228 CVE-2006-4124 MISC:http://karol.wiesek.pl/files/lesstif-advisory.pdf  View
187557 20228 CVE-2006-4124 MILW0RM:2144  View
187558 20228 CVE-2006-4124 URL:http://milw0rm.com/exploits/2144  View
187559 20228 CVE-2006-4124 BID:19430  View
187560 20228 CVE-2006-4124 URL:http://www.securityfocus.com/bid/19430  View
187561 20228 CVE-2006-4124 VUPEN:ADV-2006-3230  View
187562 20228 CVE-2006-4124 URL:http://www.vupen.com/english/advisories/2006/3230  View
187563 20228 CVE-2006-4124 SECUNIA:21428  View
187564 20228 CVE-2006-4124 URL:http://secunia.com/advisories/21428  View
187565 20228 CVE-2006-4124 XF:lestif-libxm-privilege-escalation(28298)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58821 JVNDB-2006-001087 DConnect Daemon の cmd.dc.c の dc_chat 関数におけるサービス運用妨害 (DoS) の脆弱性 DConnect Daemon の cmd.dc.c の dc_chat 関数には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2006-4126 20228 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001087.html  View