Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-7098
HistoryMar 03, 2007 - 7:19 p.m.

CVE-2006-7098

2007-03-0319:19:00
CWE-264
[email protected]
web.nvd.nist.gov
26
cve-2006-7098
debian
gnu/linux
apache http server
privilege escalation
cgi
tiocstiioctl

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd from a controlling tty when httpd is started interactively, which allows local users to gain privileges to that tty via a CGI program that calls the TIOCSTI ioctl.

Affected configurations

NVD
Node
debianapacheMatch1.3.34.4
CPENameOperatorVersion
debian:apachedebian apacheeq1.3.34.4

Related

nvd 1
redhatcve 1
ubuntucve 1
cvelist 1
nvd
nvd
CVE-2006-7098
2007-03-03 19:19:00
redhatcve
redhatcve
CVE-2006-7098
2015-10-30 09:27:30
ubuntucve
ubuntucve
CVE-2006-7098
2007-03-03 00:00:00
cvelist
cvelist
CVE-2006-7098
2007-03-03 19:00:00

6.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON
Related for CVE-2006-7098
nvd1redhatcve1ubuntucve1cvelist1