CVE-2006-5214
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before...
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
Exploit likelihood
What each source reports
NVD Score used
1.2
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
- Record
CVE-2006-5214- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
- Record
CVE-2006-5214- Updated
- 2026-11-02
EUVDEUVD-2006-5199 No score
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
- Record
EUVD-2006-5199- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6w46-68r7-2g8p No score
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before...
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
- Record
GHSA-6w46-68r7-2g8p- Updated
- 2026-11-02
OSV No score
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
- Record
CVE-2006-5214- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5214 No score
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
- Record
DEBIAN-CVE-2006-5214- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5214 is a low vulnerability (CVSS 1.2) in Netbsd, published October 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in xdm 1:1.0.5-1.
References
securitytracker.com/id?1017015
secunia.com/advisories/22992
bugs.freedesktop.org/show_bug.cgi?id=5897
vupen.com/english/advisories/2006/3962
secunia.com/advisories/22469
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1760
Show 10 moreShow less
secunia.com/advisories/22323
securityfocus.com/bid/20400
sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1
ubuntu.com/usn/usn-364-1
support.avaya.com/elmodocs2/security/ASA-2006-250.htm
secunia.com/advisories/22439
netbsd.org/cgi-bin/query-pr-single.pl?number=32804
nvd.nist.gov/vuln/detail/CVE-2006-5214
github.com/advisories/GHSA-6w46-68r7-2g8p
security-tracker.debian.org/tracker/CVE-2006-5214