Every CVESearch/Get API key

CVE-2006-5214

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before...

1.2 LowFix available

CVE-2006-5214 is a low vulnerability (CVSS 1.2) in Netbsd, published October 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in xdm 1:1.0.5-1.

What does this mean?
Severity
1.2 LowCVSS 2.0, NVD
Exploit chance
0.36%EPSS, 30th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1:1.0.5-1xdm +5 more

Description

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Exploit likelihood

0.36%Down 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xdm
Debian:12
before 1:1.0.5-1
1:1.0.5-1
xdm
Debian:13
before 1:1.0.5-1
1:1.0.5-1
xdm
Debian:14
before 1:1.0.5-1
1:1.0.5-1
xorg
Debian:12
before 1:7.1.0-13
1:7.1.0-13
xorg
Debian:13
before 1:7.1.0-13
1:7.1.0-13
xorg
Debian:14
before 1:7.1.0-13
1:7.1.0-13

What each source reports

NVD Score used1.2

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
CVE-2006-5214
CVSS 2.0
1.2 LowAV:L/AC:H/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE ListNo score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
CVE-2006-5214
Updated
2026-11-02
EUVDEUVD-2006-5199No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
EUVD-2006-5199
Updated
2026-11-03
GitHub AdvisoriesGHSA-6w46-68r7-2g8pNo score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before...

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
GHSA-6w46-68r7-2g8p
Updated
2026-11-02
OSVNo score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
CVE-2006-5214
Updated
2026-11-02
OSVDEBIAN-CVE-2006-5214No score

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Record
DEBIAN-CVE-2006-5214
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 10 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open