Home > Vulnerability Database > CVE-2006-0043

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-0043

Date: January 30, 2006

Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.

Severity Score

5.9

Related Resources (12)

Url: http://lists.suse.com/archive/suse-security-announce/2006-Jan/0007.html

Url: http://www.debian.org/security/2006/dsa-975

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-0043

Url: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350020

Url: http://secunia.com/advisories/18638

Url: http://www.securityfocus.com/bid/16388

Url: http://secunia.com/advisories/18614

Url: http://secunia.com/advisories/18889

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/24347

Url: http://www.vupen.com/english/advisories/2006/0348

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-0043

Url: https://www.mend.io/vulnerability-database/CVE-2006-0043

Severity Score

5.9

CVSS v3.1

Base Score:	5.9
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	4.6
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us