CVE-2006-5214: Race Condition
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5214?
CVE-2006-5214 has a moderate severity rating due to the potential exposure of sensitive Xsession error files to local users.
How do I fix CVE-2006-5214?
To fix CVE-2006-5214, ensure that the permissions for the Xsession errors file are correctly set before allowing user access.
Who is affected by CVE-2006-5214?
CVE-2006-5214 affects users of NetBSD versions prior to 20060212, X.Org versions prior to 20060225, and Solaris 8 through 10 versions prior to 20061006.
What causes CVE-2006-5214?
CVE-2006-5214 is caused by a race condition in the Xsession script that results in weak permissions for Xsession error files.
Can CVE-2006-5214 be exploited remotely?
CVE-2006-5214 cannot be exploited remotely as it requires local user access to the affected systems.