PT-2006-5950 · Netbsd+2 · X Display Manager+2

Jeremy C. Reed · Published 2006-10-09 · Updated 2018-10-30 · CVE-2006-5215

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions X Display Manager (xdm) in NetBSD versions prior to 20060212 X.Org versions prior to 20060317 Solaris versions 8 through 10 prior to 20061006

Description The issue allows local users to overwrite arbitrary files or read another user's Xsession errors file via a symlink attack on a /tmp/xses-$USER file. This is a result of a flaw in the Xsession script used by the affected software.

Recommendations For X Display Manager (xdm) in NetBSD versions prior to 20060212, update to a version released after 20060212. For X.Org versions prior to 20060317, update to a version released after 20060317. For Solaris versions 8 through 10 prior to 20061006, update to a version released after 20061006.

Fix

Related Identifiers

CVE-2006-5215

Affected Products

Solaris

X Display Manager

X.Org

References · 12

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-5215 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-5215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5215 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5215 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29427 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm · Note
• http://netbsd.org/cgi-bin/query-pr-single.pl?number=32805 · Note
• http://securitytracker.com/id?1017015 · Note
• https://bugs.freedesktop.org/show_bug.cgi?id=5898 · Note
• http://secunia.com/advisories/22992 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2205 · Note