VulnerabilityModified
CVE-2006-2196
Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges.
MEDIUM 4.6EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Affected
- jochen friedrich/pinball
- Source
- security@debian.org
References
- http://secunia.com/advisories/20778
- http://secunia.com/advisories/20834
- http://www.debian.org/security/2006/dsa-1102Patch, Vendor Advisory
- http://www.osvdb.org/26829
- http://www.vupen.com/english/advisories/2006/2535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27420
- http://secunia.com/advisories/20778
- http://secunia.com/advisories/20834
- http://www.debian.org/security/2006/dsa-1102Patch, Vendor Advisory
- http://www.osvdb.org/26829
- http://www.vupen.com/english/advisories/2006/2535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27420
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.