CVE-2006-4124

NONE EPSS 36.0%

Published Aug 14, 200619y ago · Modified Jun 16, 20262w ago

Published Aug 14, 2006 19y ago

Last Modified Jun 16, 2026 2w ago

Description

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.

Threat Intelligence

EPSS Exploit Probability

36.0% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Affected Products 2

Vendor	Product	Version	Range
lesstif	lesstif	*	≤0.95.0
lesstif	lesstif	0.93.94	any

References 6

karol.wiesek.pl http://karol.wiesek.pl/files/lesstif-advisory.pdf

ExploitVendor Advisory
secunia.com http://secunia.com/advisories/21428

Vendor Advisory
securityfocus.com http://www.securityfocus.com/bid/19430

Exploit
vupen.com http://www.vupen.com/english/advisories/2006/3230
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/28298
exploit-db.com https://www.exploit-db.com/exploits/2144

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.