NVD

Id
63821  
Name
CVE-2006-5215  
Description
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user"s Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2008-09-05  
Seq
2006-5215  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332645 63821 CVE-2006-5215 oval:org.mitre.oval:def:2205  View
332646 63821 CVE-2006-5215 1017015  View
332647 63821 CVE-2006-5215 102652  View
332648 63821 CVE-2006-5215 http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm  View
332649 63821 CVE-2006-5215 http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32805  View
332650 63821 CVE-2006-5215 xdm-xsession-symlink(29427)  View
332651 63821 CVE-2006-5215 https://bugs.freedesktop.org/show_bug.cgi?id=5898  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58476 JVNDB-2006-000672 Xdm の Xsession スクリプトにおけるシンボリックリンク攻撃を受ける脆弱性 X ディスプレイマネージャ (xdm) の Xsession スクリプトには、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2006-5215 21317 CVE-2006-5215 63821 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000672.html 2006-10-06 2007-04-01 View