{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-14T00:00:00", "descriptions": [{"lang": "en", "value": "artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2006-2357", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2357"}, {"name": "20899", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20899"}, {"name": "26506", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/26506"}, {"name": "MDKSA-2006:107", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:107"}, {"name": "1016298", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016298"}, {"name": "GLSA-200606-22", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml"}, {"name": "20868", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20868"}, {"name": "20060615 rPSA-2006-0105-1 arts", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/437362/100/0/threaded"}, {"name": "20786", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20786"}, {"name": "GLSA-200704-22", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200704-22.xml"}, {"name": "ADV-2007-0409", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0409"}, {"name": "20677", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20677"}, {"name": "23697", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23697"}, {"name": "25059", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25059"}, {"name": "arts-artwrapper-privilege-escalation(27221)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27221"}, {"name": "20827", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20827"}, {"name": "SUSE-SR:2006:015", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"name": "25032", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25032"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.kde.org/info/security/advisory-20060614-2.txt"}, {"name": "[beast] 20061228 ANNOUNCE: BEAST/BSE v0.7.1", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://mail.gnome.org/archives/beast/2006-December/msg00025.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://dot.kde.org/1150310128/"}, {"name": "18429", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18429"}, {"name": "SSA:2006-178-03", "tags": ["vendor-advisory", "x_refsource_SLACKWARE"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-2916", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2006-2357", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2357"}, {"name": "20899", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20899"}, {"name": "26506", "refsource": "OSVDB", "url": "http://www.osvdb.org/26506"}, {"name": "MDKSA-2006:107", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:107"}, {"name": "1016298", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016298"}, {"name": "GLSA-200606-22", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml"}, {"name": "20868", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20868"}, {"name": "20060615 rPSA-2006-0105-1 arts", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/437362/100/0/threaded"}, {"name": "20786", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20786"}, {"name": "GLSA-200704-22", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200704-22.xml"}, {"name": "ADV-2007-0409", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0409"}, {"name": "20677", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20677"}, {"name": "23697", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23697"}, {"name": "25059", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25059"}, {"name": "arts-artwrapper-privilege-escalation(27221)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27221"}, {"name": "20827", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20827"}, {"name": "SUSE-SR:2006:015", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"name": "25032", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25032"}, {"name": "http://www.kde.org/info/security/advisory-20060614-2.txt", "refsource": "CONFIRM", "url": "http://www.kde.org/info/security/advisory-20060614-2.txt"}, {"name": "[beast] 20061228 ANNOUNCE: BEAST/BSE v0.7.1", "refsource": "MLIST", "url": "http://mail.gnome.org/archives/beast/2006-December/msg00025.html"}, {"name": "http://dot.kde.org/1150310128/", "refsource": "CONFIRM", "url": "http://dot.kde.org/1150310128/"}, {"name": "18429", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18429"}, {"name": "SSA:2006-178-03", "refsource": "SLACKWARE", "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:06:27.206Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2006-2357", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2357"}, {"name": "20899", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20899"}, {"name": "26506", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/26506"}, {"name": "MDKSA-2006:107", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:107"}, {"name": "1016298", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016298"}, {"name": "GLSA-200606-22", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml"}, {"name": "20868", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20868"}, {"name": "20060615 rPSA-2006-0105-1 arts", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/437362/100/0/threaded"}, {"name": "20786", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20786"}, {"name": "GLSA-200704-22", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200704-22.xml"}, {"name": "ADV-2007-0409", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0409"}, {"name": "20677", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20677"}, {"name": "23697", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23697"}, {"name": "25059", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25059"}, {"name": "arts-artwrapper-privilege-escalation(27221)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27221"}, {"name": "20827", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20827"}, {"name": "SUSE-SR:2006:015", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"name": "25032", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25032"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.kde.org/info/security/advisory-20060614-2.txt"}, {"name": "[beast] 20061228 ANNOUNCE: BEAST/BSE v0.7.1", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://mail.gnome.org/archives/beast/2006-December/msg00025.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://dot.kde.org/1150310128/"}, {"name": "18429", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18429"}, {"name": "SSA:2006-178-03", "tags": ["vendor-advisory", "x_refsource_SLACKWARE", "x_transferred"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-2916", "datePublished": "2006-06-15T10:00:00", "dateReserved": "2006-06-08T00:00:00", "dateUpdated": "2024-08-07T18:06:27.206Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kde:arts:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "ECA4B1F0-C924-4308-862F-0FE65D7BAB4D", "vulnerable": true}, {"criteria": "cpe:2.3:a:kde:arts:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "EC2D979D-0731-4CE3-9D16-22EF314884A2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC4FB0A3-C8CC-4AB5-8A9D-EF370368B1EB", "versionStartIncluding": "2.6.0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges."}, {"lang": "es", "value": "artswrapper en aRts, cuando se ejecuta como root sobre linux 2.6.0 o versiones posteriores, no valida la variable setuid de retorno de la llamada a la funci\u00f3n, lo que permite a usuarios locales ganar privilegios de root al provocar un fallo sobre setuid."}], "evaluatorSolution": "Product is only vulnerable when running setuid root on Linux 2.6.0 or later versions.\nVendor links provide patches for each affected version.", "id": "CVE-2006-2916", "lastModified": "2024-01-21T01:42:33.730", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 1.5, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2006-06-15T10:02:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "http://dot.kde.org/1150310128/"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "http://mail.gnome.org/archives/beast/2006-December/msg00025.html"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/20677"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/20786"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/20827"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/20868"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/20899"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/25032"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/25059"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://security.gentoo.org/glsa/glsa-200704-22.xml"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://securitytracker.com/id?1016298"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.kde.org/info/security/advisory-20060614-2.txt"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:107"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.novell.com/linux/security/advisories/2006_38_security.html"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.osvdb.org/26506"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/437362/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/18429"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/23697"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2006/2357"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2007/0409"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27221"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "Not vulnerable. We do not ship aRts as setuid root on Red Hat Enterprise Linux 2.1, 3, or 4.", "lastModified": "2006-08-16T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-273"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "arts: does not check the return value of the setuid which prevents artsd from dropping privileges", "id": "2259536", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259536"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-273", "details": ["artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.", "A vulnerability was found in artswrapper in aRts. When running a setuid root, it does not check the return value of the setuid function call. This flaw allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2006-2916", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "arts", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2024-01-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2006-2916\nhttps://nvd.nist.gov/vuln/detail/CVE-2006-2916\nhttps://mail.gnome.org/archives/beast/2006-December/msg00025.html"], "statement": "Not vulnerable. We do not ship aRts as setuid root on Red Hat Enterprise Linux 2.1, 3, or 4.", "threat_severity": "Moderate", "upstream_fix": "arts 1.5.10"}