{"id":"CVE-2006-2916","aliases":["EUVD-2006-2913","GHSA-4532-mwp5-jccg"],"status":"published","title":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check...","description":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00385,"percentile":0.32808,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-273"],"published":"2006-06-15T10:00:00Z","modified":"2026-06-16T22:26:01Z","products":[{"vendor":"kde","product":"arts"}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/2357","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/20899","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/26506","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:107","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016298","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/20868","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/437362/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/20786","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200704-22.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0409","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/20677","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/23697","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/25059","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27221","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/20827","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_38_security.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/25032","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.kde.org/info/security/advisory-20060614-2.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://mail.gnome.org/archives/beast/2006-December/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List"]},{"url":"http://dot.kde.org/1150310128/","tags":["x_refsource_CONFIRM","x_transferred","Not Applicable"]},{"url":"http://www.securityfocus.com/bid/18429","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.468256","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2916"},{"url":"http://dot.kde.org/1150310128"},{"url":"https://github.com/advisories/GHSA-4532-mwp5-jccg"}],"sources":{"cve":[{"id":"CVE-2006-2916","description":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.","status":"published","published":"2006-06-15T10:00:00Z","modified":"2024-08-07T18:06:27.206Z","updated_at":"2026-11-02T14:33:48.871799Z"}],"euvd":[{"id":"EUVD-2006-2913","description":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.","status":"published","published":"2006-06-15T10:00:00Z","modified":"2024-08-07T18:06:27Z","updated_at":"2026-11-03T01:15:58.732208Z"}],"ghsa":[{"id":"GHSA-4532-mwp5-jccg","title":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check...","description":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.","status":"published","published":"2022-05-01T07:03:48Z","modified":"2025-04-03T04:35:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-273"],"updated_at":"2026-11-02T15:00:46.038216Z"}],"nvd":[{"id":"CVE-2006-2916","description":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.","status":"published","published":"2006-06-15T10:02:00Z","modified":"2026-06-16T22:26:01.95Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-273"],"updated_at":"2026-11-02T14:01:03.750605Z"}]}}