VULNERABILITY INTELLIGENCE
CVE-2006-2916
CVSS score7.8 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2006-06-15
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.
Weakness classification
- CWE-273: Improper Check for Dropped Privileges
Primary references
- cve@mitre.org — Not Applicable
- cve@mitre.org — Mailing List
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link, Vendor Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Mailing List, Third Party Advisory