nvd-json-data-feeds/CVE-2006/CVE-2006-66xx/CVE-2006-6698.json

{
  "id": "CVE-2006-6698",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2006-12-22T18:28:00.000",
  "lastModified": "2024-11-21T00:23:26.147",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The GConf daemon (gconfd) in GConf 2.14.0 creates temporary files under directories with names based on the username, even when GCONF_GLOBAL_LOCKS is not set, which allows local users to cause a denial of service by creating the directories ahead of time, which prevents other users from using Gnome."
    },
    {
      "lang": "es",
      "value": "El demonio GConf (gconfd) en GConf 2.14.0 crea archivos temporales bajo directorio con nombres basados en el nombre de usuario, incluso cuando GCONF_GLOBAL_LOCKS no est\u00e1 activo, lo cual permite a usuarios locales provocar denegaci\u00f3n de servicio a trav\u00e9s de la creaci\u00f3n de directorios antes de tiempo, lo cual evita que otros usuarios usen gnome."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P",
          "baseScore": 1.9,
          "accessVector": "LOCAL",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "PARTIAL"
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.4,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:gnome:gconf:2.14.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3D8548A-E41C-47A4-A67B-9DDDAEB71555"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://bugzilla.gnome.org/show_bug.cgi?id=167030",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=219279",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "http://secunia.com/advisories/23452",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/21762",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/5148",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugzilla.gnome.org/show_bug.cgi?id=167030",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=219279",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "http://secunia.com/advisories/23452",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/21762",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/5148",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vendorComments": [
    {
      "organization": "Red Hat",
      "comment": "The Red Hat Security Response Team has rated this issue as having low security impact. The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 3, 4, or 5.",
      "lastModified": "2008-05-29T00:00:00"
    }
  ]
}