The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

NSS_NSPR_JSS 3.34_x86: NSPR 4.17 / NSS 3.3.
Date this patch was last updated by Sun : May/16/18

NSS_NSPR_JSS 3.34: NSPR 4.17 / NSS 3.34 /.
Date this patch was last updated by Sun : May/16/18

NSS_NSPR_JSS 3.35_x86: NSPR 4.18 / NSS 3.35 / JSS 4.3.2.
Date this patch was last updated by Sun : May/16/18

NSS_NSPR_JSS 3.35: NSPR 4.18 / NSS 3.35 / JSS 4.3.2.
Date this patch was last updated by Sun : May/16/18

NSS_NSPR_JSS 3.30.2_x86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2.
Date this patch was last updated by Sun : Nov/11/17

NSS_NSPR_JSS 3.21_x86: NSPR 4.11 / NSS 3.21 / JSS 4.3.2.
Date this patch was last updated by Sun : Mar/22/16

NSS_NSPR_JSS 3.17.4_x86: NSPR 4.10.7 / NSS 3.17.4 / JSS 4.3.2.
Date this patch was last updated by Sun : Dec/24/15

NSS_NSPR_JSS 3.17.2_x86: NSPR 4.10.7 / NSS.
Date this patch was last updated by Sun : Feb/19/15

NSS_NSPR_JSS 3.16_x86: NSPR 4.10.4 / NSS 3.
Date this patch was last updated by Sun : Nov/15/14

NSS_NSPR_JSS 3.13.1_x86: NSPR 4.8.9 / NSS 3.13.1 / JSS 4.3.2.
Date this patch was last updated by Sun : Feb/08/12

NSS_NSPR_JSS 3.30.2: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2.
Date this patch was last updated by Sun : Nov/09/17

NSS_NSPR_JSS 3.21: NSPR 4.11 / NSS 3.21 /.
Date this patch was last updated by Sun : Mar/22/16

NSS_NSPR_JSS 3.17.4: NSPR 4.10.7 / NSS 3.17.4 / JSS 4.3.2.
Date this patch was last updated by Sun : Dec/24/15

NSS_NSPR_JSS 3.17.2: NSPR 4.10.7 / NSS 3.1.
Date this patch was last updated by Sun : Feb/19/15

NSS_NSPR_JSS 3.16: NSPR 4.10.4 / NSS 3.16.
Date this patch was last updated by Sun : Nov/15/14

NSS_NSPR_JSS 3.13.1: NSPR 4.8.9 / NSS 3.13.1 / JSS 4.3.2.
Date this patch was last updated by Sun : Feb/08/12

ID	Name	Product	Family	Severity
109912	Solaris 10 (x86) : 119214-37	Nessus	Solaris Local Security Checks	high
109911	Solaris 10 (sparc) : 119213-37	Nessus	Solaris Local Security Checks	high
109884	Solaris 10 (x86) : 119214-38	Nessus	Solaris Local Security Checks	medium
109882	Solaris 10 (sparc) : 119213-38	Nessus	Solaris Local Security Checks	medium
107816	Solaris 10 (x86) : 119214-36	Nessus	Solaris Local Security Checks	medium
107815	Solaris 10 (x86) : 119214-33	Nessus	Solaris Local Security Checks	medium
107814	Solaris 10 (x86) : 119214-32	Nessus	Solaris Local Security Checks	medium
107813	Solaris 10 (x86) : 119214-31	Nessus	Solaris Local Security Checks	medium
107812	Solaris 10 (x86) : 119214-30	Nessus	Solaris Local Security Checks	medium
107811	Solaris 10 (x86) : 119214-27 (BEAST)	Nessus	Solaris Local Security Checks	medium
107313	Solaris 10 (sparc) : 119213-36	Nessus	Solaris Local Security Checks	medium
107312	Solaris 10 (sparc) : 119213-33	Nessus	Solaris Local Security Checks	medium
107311	Solaris 10 (sparc) : 119213-32	Nessus	Solaris Local Security Checks	medium
107310	Solaris 10 (sparc) : 119213-31	Nessus	Solaris Local Security Checks	medium
107309	Solaris 10 (sparc) : 119213-30	Nessus	Solaris Local Security Checks	medium
107308	Solaris 10 (sparc) : 119213-27 (BEAST)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2006-4842

medium

Tenable Plugins

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium