Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-4842
HistoryOct 12, 2006 - 12:00 a.m.

CVE-2006-4842

2006-10-1200:00:00
ubuntu.com
ubuntu.com
10

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.004

Percentile

73.7%

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun
Solaris 10, trusts user-specified environment variables for specifying log
files even when running from setuid programs, which allows local users to
create or overwrite arbitrary files.

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.004

Percentile

73.7%