Security Advisory

CVE-2006-5215

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-10-09 21:00:00

Last updated 2024-08-07 19:41:05

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.

← Browse all CVEs View on cve.org ↗