CVE-2006-4439 describes an insecure file and directory permissions vulnerability in pkgadd within Sun Solaris 10 prior to 20060825. If the pkgmap file contains a question mark in the mode field, pkgadd installs files with overly permissive 755 or 777 permissions, allowing local users to modify arbitrary files or directories. This vulnerability has a CVSS score of 3.6, indicating low severity with local access, low attack complexity, and potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.0CPE matchmatch criteria | cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.