Unscored severity · published Jan 31, 2006
CVE-2006-0043
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Suse Linux · Suse
1.0; 9.1; 9.1; 9.1; 9.2; 9.2; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0043
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0043
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350020
Patch
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0007.html
Vendor Advisory
http://secunia.com/advisories/18614
Patch
http://secunia.com/advisories/18638
secunia.com
http://secunia.com/advisories/18889
www.debian.org
http://www.debian.org/security/2006/dsa-975
More from Suse Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
9.8
CVE-1999-0426
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing
8.2
CVE-2017-3224
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber
7.8
CVE-2004-0940
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via…
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync