Detections
Analytics
CVE-2006-2916
high
Description
artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/27221
http://www.mandriva.com/security/advisories?name=MDKSA-2006:107
http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2913
http://www.vupen.com/english/advisories/2007/0409
http://www.vupen.com/english/advisories/2006/2357
http://www.securityfocus.com/bid/23697
http://www.securityfocus.com/bid/18429
http://www.securityfocus.com/archive/1/437362/100/0/threaded
http://www.novell.com/linux/security/advisories/2006_38_security.html
http://www.kde.org/info/security/advisory-20060614-2.txt
http://securitytracker.com/id?1016298
http://secunia.com/advisories/25059
http://secunia.com/advisories/25032
http://secunia.com/advisories/20899
http://secunia.com/advisories/20868
http://secunia.com/advisories/20827
http://secunia.com/advisories/20786
http://secunia.com/advisories/20677
http://mail.gnome.org/archives/beast/2006-December/msg00025.html