NVD

Id
63458  
Name
CVE-2006-4842  
Description
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-11  
Modified Date
2011-06-20  
Seq
2006-4842  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330760 63458 CVE-2006-4842 20061011 Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability  View
330761 63458 CVE-2006-4842 oval:org.mitre.oval:def:1819  View
330762 63458 CVE-2006-4842 1017050  View
330763 63458 CVE-2006-4842 102658  View
330764 63458 CVE-2006-4842 20061013 Re: iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability  View
330765 63458 CVE-2006-4842 20471  View
330766 63458 CVE-2006-4842 ADV-2006-4016  View
330767 63458 CVE-2006-4842 nspr-api-file-create(29489)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58498 JVNDB-2006-000694 Sun Solaris の NSPR API における権限昇格の脆弱性 Sun Solaris に含まれる Netscape ポータブル・ランタイム (NSPR) には、ログファイルの作成に使用する環境変数を不適切に取り扱うため、システム上の任意のファイルが上書き、あるいは作成される脆弱性が存在します。 CVE-2006-4842 20944 CVE-2006-4842 63458 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000694.html 2006-10-11 2007-04-01 View