VULNERABILITY INTELLIGENCE

CVE-2006-4842

CVSS score3.6 LOW
EPSS probability7.68%
CISA KEVNot currently listed
Published2006-10-12
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P

Description

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references