PT-2006-3172 · Pinball · Pinball

Publicado 2006-06-26 · Atualizado 2017-07-20 · CVE-2006-2196

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pinball version 0.3.1

Description The issue allows local users to gain privileges through unknown attack vectors, causing pinball to load plugins from an attacker-controlled directory while operating at raised privileges.

Recommendations For pinball version 0.3.1, consider restricting the loading of plugins to only trusted directories until a fix is available.

Correção

Identificadores relacionados

CVE-2006-2196

DSA-1102

Produtos afetados

Pinball

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-2196 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2006-2196 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2006-2196 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27420 · Nota
• http://secunia.com/advisories/20778 · Nota
• http://osvdb.org/26829 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-2196 · Aviso do Fabricante
• http://secunia.com/advisories/20834 · Nota
• http://vupen.com/english/advisories/2006/2535 · Nota
• http://debian.org/security/2006/dsa-1102 · Aviso do Fabricante