NVD

Id
64726  
Name
CVE-2006-6165  
Description
** DISPUTED ** ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is the responsibility of the application to properly sanitize the environment.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-11-28  
Modified Date
2008-09-05  
Seq
2006-6165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337993 64726 CVE-2006-6165 20061122 Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.  View
337994 64726 CVE-2006-6165 20061123 Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.  View

Related JVN