NVD

Id
61600  
Name
CVE-2006-2916  
Description
artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.5  
CVSS Vector
(AV:L/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-15  
Modified Date
2011-03-07  
Seq
2006-2916  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318665 61600 CVE-2006-2916 http://dot.kde.org/1150310128/  View
318666 61600 CVE-2006-2916 [beast] 20061228 ANNOUNCE: BEAST/BSE v0.7.1  View
318667 61600 CVE-2006-2916 GLSA-200704-22  View
318668 61600 CVE-2006-2916 1016298  View
318669 61600 CVE-2006-2916 SSA:2006-178-03  View
318670 61600 CVE-2006-2916 GLSA-200606-22  View
318671 61600 CVE-2006-2916 http://www.kde.org/info/security/advisory-20060614-2.txt  View
318672 61600 CVE-2006-2916 MDKSA-2006:107  View
318673 61600 CVE-2006-2916 SUSE-SR:2006:015  View
318674 61600 CVE-2006-2916 20060615 rPSA-2006-0105-1 arts  View
318675 61600 CVE-2006-2916 18429  View
318676 61600 CVE-2006-2916 23697  View
318677 61600 CVE-2006-2916 ADV-2006-2357  View
318678 61600 CVE-2006-2916 ADV-2007-0409  View
318679 61600 CVE-2006-2916 arts-artwrapper-privilege-escalation(27221)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61539 JVNDB-2006-003805 aRts の artswrapper における root 権限を取得される脆弱性 aRts の artswrapper には、root 権限を取得される脆弱性が存在します。 CVE-2006-2916 19018 CVE-2006-2916 61600 6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003805.html 2006-06-15 2013-12-26 View