PT-2006-5598 · Netscape · Netscape Portable Runtime (Nspr) Api

Published 2006-10-12 · Updated 2018-10-17 · CVE-2006-4842

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netscape Portable Runtime (NSPR) API versions 4.6.1 through 4.6.2

Description The issue allows local users to create or overwrite arbitrary files because it trusts user-specified environment variables for specifying log files, even when running from setuid programs.

Recommendations For Netscape Portable Runtime (NSPR) API versions 4.6.1 and 4.6.2, consider restricting the ability of setuid programs to use user-specified environment variables for log file specification until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-4842

Affected Products

Netscape Portable Runtime (Nspr) Api

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/libnspr_nspr_log_file_priv_esc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/45433 · Exploit
• 🔥 https://exploit-db.com/exploits/2569 · Exploit
• 🔥 https://exploit-db.com/exploits/28789 · Exploit
• 🔥 https://exploit-db.com/exploits/2543 · Exploit
• 🔥 https://exploit-db.com/exploits/2641 · Exploit
• 🔥 https://exploit-db.com/exploits/28788 · Exploit
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4016 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102658-1 · Vendor Advisory
• http://secunia.com/advisories/22348 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4842 · Security Note
• http://securitytracker.com/id?1017050 · Note
• http://securityfocus.com/archive/1/448691/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29489 · Note