CVE-2006-4842

CVE-2006-4842 describes a local privilege escalation vulnerability in Netscape Portable Runtime (NSPR) API versions 4.6.1 and 4.6.2, specifically as used in Sun Solaris 10. The vulnerability arises from the NSPR API trusting user-specified environment variables for log file paths even when running setuid programs, allowing local users to create or overwrite arbitrary files. This vulnerability has a CVSS score of 3.6 (AV:L/AC:L/Au:N/C:N/I:P/A:P), indicating a low attack complexity and requiring local access, but it can lead to partial integrity and availability impacts. Its FAUCET Risk Score is high at 92/100, despite a low EPSS score, suggesting a significant potential risk. Exploitation is confirmed with multiple public exploit codes available, including a Metasploit module and several ExploitDB entries demonstrating arbitrary file creation and privilege escalation. While not on the KEV catalog or Hot List, the existence of readily available exploits indicates a practical threat, though there is no evidence of active exploitation or significant community discussion.