CVE-2006-4842

no score yetEPSS 7.7%

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

EPSS: 7.7% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2006-10-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

netscape:portable_runtime_api
sun:solaris

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418
http://secunia.com/advisories/22348
http://securitytracker.com/id?1017050
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102658-1
http://www.securityfocus.com/archive/1/448691/100/0/threaded

Check your stack JSON