Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

lesstif: libXm library privilege escalation

Package(s):

lesstif

CVE #(s):

CVE-2006-4124

Created:

August 29, 2006

Updated:

August 30, 2006

Description:

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.

Alerts:

Mandriva

MDKSA-2006:154

2006-08-28

(Log in to post comments)