CVE-2006-2916: High severity kde arts vulnerability
artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2916?
CVE-2006-2916 is considered a high severity vulnerability due to its potential to allow local users to gain root privileges.
How do I fix CVE-2006-2916?
To mitigate CVE-2006-2916, ensure that aRts is not setuid or upgrade to newer versions of KDE aRts that address this vulnerability.
Who is affected by CVE-2006-2916?
Users running KDE aRts version 1.0 or 1.2 on Linux kernels 2.6.0 or later are affected by CVE-2006-2916.
What does CVE-2006-2916 allow attackers to do?
CVE-2006-2916 allows local users to gain root privileges by exploiting the improper handling of the setuid system call.
What is the environment in which CVE-2006-2916 is exploited?
CVE-2006-2916 is specifically exploited in environments where aRts is configured to run with setuid root permissions on vulnerable Linux kernel versions.