PT-2006-5598 · Netscape · Netscape Portable Runtime (Nspr) Api

Publicado 2006-10-12 · Atualizado 2018-10-17 · CVE-2006-4842

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netscape Portable Runtime (NSPR) API versions 4.6.1 through 4.6.2

Description The issue allows local users to create or overwrite arbitrary files because it trusts user-specified environment variables for specifying log files, even when running from setuid programs.

Recommendations For Netscape Portable Runtime (NSPR) API versions 4.6.1 and 4.6.2, consider restricting the ability of setuid programs to use user-specified environment variables for log file specification until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-4842

Produtos afetados

Netscape Portable Runtime (Nspr) Api

Referências · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/libnspr_nspr_log_file_priv_esc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/45433 · Exploit
• 🔥 https://exploit-db.com/exploits/2569 · Exploit
• 🔥 https://exploit-db.com/exploits/28789 · Exploit
• 🔥 https://exploit-db.com/exploits/2543 · Exploit
• 🔥 https://exploit-db.com/exploits/2641 · Exploit
• 🔥 https://exploit-db.com/exploits/28788 · Exploit
• http://securitytracker.com/id?1017050 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418 · Aviso do Fabricante
• http://securityfocus.com/archive/1/448691/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/4016 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102658-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29489 · Nota
• http://secunia.com/advisories/22348 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4842 · Nota de Segurança