Every CVESearch/Get API key

CVE-2006-3693

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with...

4.6 MediumPublic exploit

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

Exploit likelihood

0.93%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.6

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

Record
CVE-2006-3693
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

Record
CVE-2006-3693
Updated
2026-11-02
EUVDEUVD-2006-3688No score

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

Record
EUVD-2006-3688
Updated
2026-11-03
GitHub AdvisoriesGHSA-v5m7-7rqh-cpgjNo score

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with...

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

Record
GHSA-v5m7-7rqh-cpgj
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3693 is a medium vulnerability (CVSS 4.6) in Rocks Clusters Clusters, published July 19, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 61st percentile. No source names a fixed version.

References

Show 5 moreShow less
MoveEnter Open