CVE-2006-4842
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user...
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
Exploit likelihood
What each source reports
NVD Score used
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
- Record
CVE-2006-4842- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
- Record
CVE-2006-4842- Updated
- 2026-11-02
EUVDEUVD-2006-4829 No score
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
- Record
EUVD-2006-4829- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c7x4-3f9v-h9qf No score
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user...
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
- Record
GHSA-c7x4-3f9v-h9qf- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (1) | 2006-10-13 |
| Exploit-DB | Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (2) | 2006-10-16 |
| Exploit-DB | Solaris 10 libnspr - 'Constructor' Arbitrary File Creation Privilege Escalation (3) | 2006-10-24 |
| Exploit-DB | Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (1) | 2006-10-13 |
| Exploit-DB | Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2) | 2006-10-24 |
| Exploit-DB | Solaris - libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit) | 2018-09-18 |
| Metasploit | Solaris libnspr NSPR_LOG_FILE Privilege Escalation | 2006-10-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4842 is a low vulnerability (CVSS 3.6) in Sun Solaris, published October 12, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.68%, the 94th percentile. No source names a fixed version.