| CNNVD-ID编号 | CNNVD-200608-234 |
| CVE编号 | CVE-2006-4124 |
| 发布时间 | 2006-08-14 |
| 更新时间 | 2006-08-16 |
| 漏洞类型 | 访问验证错误 |
| 漏洞来源 | karol@wiesek.pl discovered this issue. |
| 危险等级 | 中危 |
| 威胁类型 | 本地 |
| 厂 商 | lesstif |
利用LessTif 0.95.0及早期版本中的libXm库，本地用户可借助DEBUG_FILE 环境变量获取特权，该变量用于从setuid程序运行libXm库时，创建全域可写文件。
目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
Lesstif Lesstif 0.93.94
Mandriva lesstif-0.93.94-1.1.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-0.93.94-1.1.C30mdk.x86_64.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-0.93.94-4.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-0.93.94-4.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-clients-0.93.94-1.1.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-clients-0.93.94-1.1.C30mdk.x86_64.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-clients-0.93.94-4.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-clients-0.93.94-4.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-devel-0.93.94-1.1.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-devel-0.93.94-1.1.C30mdk.x86_64.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-devel-0.93.94-4.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-devel-0.93.94-4.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-mwm-0.93.94-1.1.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-mwm-0.93.94-1.1.C30mdk.x86_64.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-mwm-0.93.94-4.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lesstif-mwm-0.93.94-4.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lib64lesstif1-0.93.94-4.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva lib64lesstif2-0.93.94-4.2.20060mdk.x86_64.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva liblesstif1-0.93.94-4.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
Mandriva liblesstif2-0.93.94-4.2.20060mdk.i586.rpm
Mandriva Linux 2006.0:
http://wwwnew.mandriva.com/en/downloads
来源: XF
名称: lestif-libxm-privilege-escalation(28298)
来源: BID
名称: 19430
来源: VUPEN
名称: ADV-2006-3230
来源: SECUNIA
名称: 21428
来源: MISC