CVE-2006-4439
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-4439
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sun Solaris pkgmap文件mode字段安全权限漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的pkgadd工具在处理文件安装的权限上存在漏洞，文件可能以不安全的访问权限被安装，可能导致权限提升或信息泄露。 如果Solaris 10系统上所安装的补丁/软件包的文件或目录的pkgmap文件mode字段包含有"?"的话，pkgadd(1M)就可能错误的将相关文件或目录的权限设置为755或777。777权限是一个安全威胁，因为如果应用到文件的话，任何用户就都可以修改该文件；如果应用到目录的话，任何用户都可以修改该目录中的文
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-4439
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-4439
请登录查看更多情报信息。
- http://support.avaya.com/elmodocs2/security/ASA-2006-250.htmx_refsource_CONFIRM
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htmx_refsource_CONFIRM
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1vendor-advisoryx_refsource_SUNALERT
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2010vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2006-4439
Same Patch Batch · n/a · 2006-08-29 · 23 CVEs total
| CVE-2006-4426 | AlberT-EasySite 'logout.php' PSA_PATH远程文件包含漏洞 | |
| CVE-2006-4436 | OpenBSD isakmpd工具 ISAKMPD IPsec通信会话回放漏洞 | |
| CVE-2006-4435 | OpenBSD semaphore分配拒绝服务漏洞 | |
| CVE-2006-4434 | Sendmail超长邮件头释放后使用(use-after-free)漏洞 | |
| CVE-2006-4433 | PHP 第三方会话句柄的会话标识符设计限制 | |
| CVE-2006-4432 | Zend Platform final组件目录遍历漏洞 | |
| CVE-2006-4431 | Zend Platform平台多个缓冲区溢出漏洞 | |
| CVE-2006-4430 | Cisco NAC代理安装安全绕过漏洞 | |
| CVE-2006-4429 | PHlyMail Lite 'mod.listmail.php'PHP远程文件包含漏洞 | |
| CVE-2006-4428 | Jupiter CMS 'Index.PHP'.PHP远程文件包含漏洞 | |
| CVE-2006-4427 | eFiction 'Index.PHP'认证绕过漏洞 | |
| CVE-2006-4440 | Ay System Solutions CMS 'main.php'PHP远程文件包含漏洞 | |
| CVE-2006-4425 | phpCOIN 多个PHP远程文件包含漏洞 | |
| CVE-2006-4424 | PhpCOIN多个远程文件包含漏洞 | |
| CVE-2006-4423 | Bigace Globals参数多个远程文件包含漏洞 | |
| CVE-2006-4422 | Jetbox CMS 'Search_function.PHP'远程文件包含漏洞 | |
| CVE-2006-4421 | Yapig 'Thanks_comment.PHP'跨站脚本攻击漏洞 | |
| CVE-2006-4445 | CuteNews 多个PHP远程文件包含漏洞 | |
| CVE-2006-4444 | Cybozu Garoon 多个SQL注入漏洞 | |
| CVE-2006-4443 | AlstraSoft Video Share Enterprise 'MyajaxPHP.PHP'远程文件包含漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-4439
No comments yet