3.6
CVSSv2

CVE-2006-4842

Published: 12/10/2006 Updated: 17/10/2018
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
VMScore: 390
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P

Vulnerability Summary

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

Vulnerable Product Search on Vulmon Subscribe to Product

netscape portable runtime api 4.6.2

netscape portable runtime api 4.6.1

sun solaris 10.0

Exploits

#!/bin/sh # # $Id: raptor_libnspr2,v 14 2006/10/16 11:50:48 raptor Exp $ # # raptor_libnspr2 - Solaris 10 libnspr LD_PRELOAD exploit # Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeefinfo> # # Local exploitation of a design error vulnerability in version 461 of # NSPR, as included with Sun Microsystems Solaris 10, allows attackers to # ...
#!/bin/sh # # $Id: raptor_libnspr,v 11 2006/10/13 19:12:12 raptor Exp $ # # raptor_libnspr - Solaris 10 libnspr oldschool local root # Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeefinfo> # # Local exploitation of a design error vulnerability in version 461 of # NSPR, as included with Sun Microsystems Solaris 10, allows attackers to # ...
#!/bin/sh # # $Id: raptor_libnspr3,v 11 2006/10/24 15:54:57 raptor Exp $ # # raptor_libnspr3 - Solaris 10 libnspr constructor exploit # Copyright (c) 2006 Marco Ivaldi <raptor@0xdeadbeefinfo> # # Local exploitation of a design error vulnerability in version 461 of # NSPR, as included with Sun Microsystems Solaris 10, allows attackers to ...
source: wwwsecurityfocuscom/bid/20471/info The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability A successful exploit of this issue allows an attacker to gain superuser privileges, completely compromising the affected computer Version 461 running on Sun S ...
source: wwwsecurityfocuscom/bid/20471/info The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability A successful exploit of this issue allows an attacker to gain superuser privileges, completely compromising the affected computer Version 461 running on Su ...
## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Local Rank = ExcellentRanking include Msf::Post::File include Msf::Post::Solaris::Priv include Msf::Post::Solaris::System include Msf::Post::Solaris::Kernel ...