CVE-2006-5215

Summary

CVECVE-2006-5215
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2006-10-10 04:06:00 UTC
Updated2018-10-30 16:26:00 UTC
DescriptionThe Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.

Risk And Classification

Problem Types: NVD-CWE-Other

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Netbsd Netbsd 1.0 All All All
Operating System Netbsd Netbsd 1.1 All All All
Operating System Netbsd Netbsd 1.2 All All All
Operating System Netbsd Netbsd 1.2.1 All All All
Operating System Netbsd Netbsd 1.3 All All All
Operating System Netbsd Netbsd 1.3.1 All All All
Operating System Netbsd Netbsd 1.3.2 All All All
Operating System Netbsd Netbsd 1.3.3 All All All
Operating System Netbsd Netbsd 1.4 All All All
Operating System Netbsd Netbsd 1.4 All alpha All
Operating System Netbsd Netbsd 1.4 All arm32 All
Operating System Netbsd Netbsd 1.4 All sparc All
Operating System Netbsd Netbsd 1.4 All x86 All
Operating System Netbsd Netbsd 1.4.1 All All All
Operating System Netbsd Netbsd 1.4.1 All alpha All
Operating System Netbsd Netbsd 1.4.1 All arm32 All
Operating System Netbsd Netbsd 1.4.1 All sh3 All
Operating System Netbsd Netbsd 1.4.1 All sparc All
Operating System Netbsd Netbsd 1.4.1 All x86 All
Operating System Netbsd Netbsd 1.4.2 All All All
Operating System Netbsd Netbsd 1.4.2 All alpha All
Operating System Netbsd Netbsd 1.4.2 All arm32 All
Operating System Netbsd Netbsd 1.4.2 All sparc All
Operating System Netbsd Netbsd 1.4.2 All x86 All
Operating System Netbsd Netbsd 1.4.3 All All All
Operating System Netbsd Netbsd 1.5 All All All
Operating System Netbsd Netbsd 1.5 All sh3 All
Operating System Netbsd Netbsd 1.5 All x86 All
Operating System Netbsd Netbsd 1.5.1 All All All
Operating System Netbsd Netbsd 1.5.2 All All All
Operating System Netbsd Netbsd 1.5.3 All All All
Operating System Netbsd Netbsd 1.6 All All All
Operating System Netbsd Netbsd 1.6 beta All All
Operating System Netbsd Netbsd 1.6.1 All All All
Operating System Netbsd Netbsd 1.6.2 All All All
Operating System Netbsd Netbsd 2.0 All All All
Operating System Netbsd Netbsd 2.0.1 All All All
Operating System Netbsd Netbsd 2.0.2 All All All
Operating System Netbsd Netbsd 2.0.3 All All All
Operating System Netbsd Netbsd 2.1 All All All
Operating System Netbsd Netbsd 3.0 All All All
Operating System Netbsd Netbsd 3.99.15 All All All
Operating System Netbsd Netbsd 4.0 All All All
Operating System Netbsd Netbsd 1.0 All All All
Operating System Netbsd Netbsd 1.1 All All All
Operating System Netbsd Netbsd 1.2 All All All
Operating System Netbsd Netbsd 1.2.1 All All All
Operating System Netbsd Netbsd 1.3 All All All
Operating System Netbsd Netbsd 1.3.1 All All All
Operating System Netbsd Netbsd 1.3.2 All All All
Operating System Netbsd Netbsd 1.3.3 All All All
Operating System Netbsd Netbsd 1.4 All All All
Operating System Netbsd Netbsd 1.4 All alpha All
Operating System Netbsd Netbsd 1.4 All arm32 All
Operating System Netbsd Netbsd 1.4 All sparc All
Operating System Netbsd Netbsd 1.4 All x86 All
Operating System Netbsd Netbsd 1.4.1 All All All
Operating System Netbsd Netbsd 1.4.1 All alpha All
Operating System Netbsd Netbsd 1.4.1 All arm32 All
Operating System Netbsd Netbsd 1.4.1 All sh3 All
Operating System Netbsd Netbsd 1.4.1 All sparc All
Operating System Netbsd Netbsd 1.4.1 All x86 All
Operating System Netbsd Netbsd 1.4.2 All All All
Operating System Netbsd Netbsd 1.4.2 All alpha All
Operating System Netbsd Netbsd 1.4.2 All arm32 All
Operating System Netbsd Netbsd 1.4.2 All sparc All
Operating System Netbsd Netbsd 1.4.2 All x86 All
Operating System Netbsd Netbsd 1.4.3 All All All
Operating System Netbsd Netbsd 1.5 All All All
Operating System Netbsd Netbsd 1.5 All sh3 All
Operating System Netbsd Netbsd 1.5 All x86 All
Operating System Netbsd Netbsd 1.5.1 All All All
Operating System Netbsd Netbsd 1.5.2 All All All
Operating System Netbsd Netbsd 1.5.3 All All All
Operating System Netbsd Netbsd 1.6 All All All
Operating System Netbsd Netbsd 1.6 beta All All
Operating System Netbsd Netbsd 1.6.1 All All All
Operating System Netbsd Netbsd 1.6.2 All All All
Operating System Netbsd Netbsd 2.0 All All All
Operating System Netbsd Netbsd 2.0.1 All All All
Operating System Netbsd Netbsd 2.0.2 All All All
Operating System Netbsd Netbsd 2.0.3 All All All
Operating System Netbsd Netbsd 2.1 All All All
Operating System Netbsd Netbsd 3.0 All All All
Operating System Netbsd Netbsd 3.99.15 All All All
Operating System Netbsd Netbsd 4.0 All All All
Operating System Netbsd Netbsd All All All All
Operating System Sun Solaris 10.0 All sparc All
Operating System Sun Solaris 8.0 All sparc All
Operating System Sun Solaris 8.0 All x86 All
Operating System Sun Solaris 8.0 beta All All
Operating System Sun Solaris 9.0 All sparc All
Operating System Sun Solaris 9.0 All x86 All
Operating System Sun Solaris 9.0 x86_update_2 All All
Operating System Sun Solaris 10.0 All sparc All
Operating System Sun Solaris 8.0 All sparc All
Operating System Sun Solaris 8.0 All x86 All
Operating System Sun Solaris 8.0 beta All All
Operating System Sun Solaris 9.0 All sparc All
Operating System Sun Solaris 9.0 All x86 All
Operating System Sun Solaris 9.0 x86_update_2 All All
Operating System Sun Sunos 5.8 All All All
Operating System Sun Sunos 5.9 All All All
Operating System Sun Sunos 5.8 All All All
Operating System Sun Sunos 5.9 All All All
Application X.org Xdm All All All All

References

ReferenceSourceLinkTags
IBM X-Force Exchange XF exchange.xforce.ibmcloud.com
NetBSD Problem Report #32805: there's a /tmp file creation race condition in Xsession CONFIRM www.netbsd.org
Repository / Oval Repository OVAL oval.cisecurity.org
Avaya CMS Sun Solaris X Display Manager Security Issue - Advisories - Secunia SECUNIA secunia.com
SecurityTracker.com Archives - Xdm May Let Local Users View the Error Log Files of a Target User SECTRACK securitytracker.com
#200413: Security Vulnerability in X Display Manager (xdm(1)) Xsession Script SUNALERT sunsolve.sun.com
5898 – xorg starts then hangs on restart with fglrx CONFIRM bugs.freedesktop.org
ASA-2006-250 (SUN 102606, 102636, 102640, 102648, 102651, 102652, 102655, 102657) CONFIRM support.avaya.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

OrganizationPublishedContributorStatement
Red Hat2007-03-14Mark J CoxRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report