CVE-2006-1566

Опубликовано: 31 мар. 2006

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the tunepimp.so module, which might allow local users to gain privileges by installing malicious libraries in that directory.

Ссылки

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359241
Exploit
Patch
http://www.securityfocus.com/bid/17288
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25682
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359241
Exploit
Patch
http://www.securityfocus.com/bid/17288
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25682

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*

EPSS

Процентиль: 26%

0.00117

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-1566

ubuntu

больше 19 лет назад

CVE-2006-1566

debian

больше 19 лет назад

Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Deb ...

GHSA-q4p3-wf54-h779

github

больше 3 лет назад

EPSS

Процентиль: 26%

0.00117

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other