Lucene search
MitreCVE-2006-0646HistoryFeb 11, 2006 - 11:02 a.m.
CVE-2006-0646
2006-02-1111:02:00
mitre
web.nvd.nist.gov
43
cve
2006
0646
vulnerability
suse linux
sles 9
security
local attack
arbitrary code
nvd
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0
Percentile
5.1%
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an attacker-controlled library file.
Affected configurations
Node
susesuse_linuxMatch9.0enterprise_server
ORsusesuse_linuxMatch9.1personal
ORsusesuse_linuxMatch9.1professional
ORsusesuse_linuxMatch9.1x86_64
ORsusesuse_linuxMatch9.2personal
ORsusesuse_linuxMatch9.2professional
ORsusesuse_linuxMatch9.2x86_64
ORsusesuse_linuxMatch9.3personal
ORsusesuse_linuxMatch9.3professional
ORsusesuse_linuxMatch9.3x86_64
ORsusesuse_linuxMatch10.0professional
| Vendor | Product | Version | CPE |
|---|---|---|---|
| suse | suse_linux | 9.0 | cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:* |
| suse | suse_linux | 9.1 | cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:* |
| suse | suse_linux | 9.1 | cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:* |
| suse | suse_linux | 9.1 | cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:* |
| suse | suse_linux | 9.2 | cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:* |
| suse | suse_linux | 9.2 | cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:* |
| suse | suse_linux | 9.2 | cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:* |
| suse | suse_linux | 9.3 | cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:* |
| suse | suse_linux | 9.3 | cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:* |
| suse | suse_linux | 9.3 | cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:* |
Related
suse
suse
local privilege escalation in binutils,kdelibs3,kdegraphics3,koffice,dia,lyx
2006-02-10 15:13:41
cvelist
cvelist
CVE-2006-0646
2006-02-11 11:00:00
nvd
nvd
CVE-2006-0646
2006-02-11 11:02:00
prion
prion
Directory traversal
2006-02-11 11:02:00
debiancve
debiancve
CVE-2006-0646
2006-02-11 11:02:00
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2006-0646