Every CVE Search/ Get API key

CVE-2006-5214

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before...

1.2 LowFix available

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Exploit likelihood

0.36%Down 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.2

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
CVE-2006-5214
CVSS 2.0
1.2 LowAV:L/AC:H/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
CVE-2006-5214
Updated
2026-11-02
EUVDEUVD-2006-5199 No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
EUVD-2006-5199
Updated
2026-11-03
GitHub AdvisoriesGHSA-6w46-68r7-2g8p No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before...

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
GHSA-6w46-68r7-2g8p
Updated
2026-11-02
OSV No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
CVE-2006-5214
Updated
2026-11-02
OSVDEBIAN-CVE-2006-5214 No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
DEBIAN-CVE-2006-5214
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xdm
Debian:12
before 1:1.0.5-1
1:1.0.5-1
xdm
Debian:13
before 1:1.0.5-1
1:1.0.5-1
xdm
Debian:14
before 1:1.0.5-1
1:1.0.5-1
xorg
Debian:12
before 1:7.1.0-13
1:7.1.0-13
xorg
Debian:13
before 1:7.1.0-13
1:7.1.0-13
xorg
Debian:14
before 1:7.1.0-13
1:7.1.0-13

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-5214 is a low vulnerability (CVSS 1.2) in Netbsd, published October 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in xdm 1:1.0.5-1.

References

Show 10 moreShow less
MoveEnter Open