FICHE CVE

CVE-2006-4842

Publiée le 2006-10-12 · Dernière modification le 2026-06-16

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

CVSS 2.03.6 FAIBLE

Type de faiblesse

Validation des entrées insuffisante · CWE-20