Unscored severity · published Oct 10, 2006
CVE-2006-5215
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netbsd · Netbsd
through current; 1.0; 1.1; 1.2; 1.2.1; 1.3; +34 more · source: NVD
SO
Solaris · Sun
8.0; 8.0; 8.0; 9.0; 9.0; 9.0; +1 more · source: NVD
SU
Sunos · Sun
5.8; 5.9 · source: NVD
XD
Xdm · X.org
through 1.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5215
secunia.com
http://secunia.com/advisories/22992
securitytracker.com
http://securitytracker.com/id?1017015
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm
www.netbsd.org
http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=32805
bugs.freedesktop.org
https://bugs.freedesktop.org/show_bug.cgi?id=5898
More from Netbsd
9.8
CVE-2017-1000378
The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse…
9.8
CVE-2017-1000375
NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary…
9.8
CVE-2017-1000374
A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries
9.8
CVE-2015-8212
CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled…
9.8
CVE-2003-0466
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0…