CVEvulnerability

CVE-2006-5214

1.2 LOW Published 2006-10-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-10-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:P/I:N/A:N

Description

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Affected configurations

• netbsd netbsd 3.0 • netbsd netbsd 3.99.15 • sun solaris 9.0 • sun solaris 10.0 • sun sunos 5.8

Related

Referenced by CWE · observed example (1)

  • CWE-689 Permission Race Condition During Resource Copy weakness

References