CVE-2006-1542

lowPriorität · verfolgen · 25EPSS 0.009 · 60. PerzentilExploit · funktionalEUFRUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · funktional

Likely / severe?

0.91% (60th) EPSS

CVSS 3.7 · low

Is it mine?

4 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

enisa_euvd · nvd · redhat_csaf · certfr

EPSS · bewertet 2026-10-27

Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenrhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0264
Behobenrhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)redhat_csaf
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html
https://access.redhat.com/errata/RHSA-2008:0264
Behobenrhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2008:0525
Behobenrhn-solaris-bootstrap-0:5.0.2-3.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2008:0525
Behobenrhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2008:0525
Behobenrhn_solaris_bootstrap_5_0_2_3-0:1-0.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2008:0525
Behobenrhn-solaris-bootstrap-0:5.1.1-3.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2008:0629
Behobenrhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2008:0629

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

3.7

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.03.7lowAV:L/AC:H/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 1.9 · Auswirkung 6.4

v2.03.3lowAV:L/AC:H/Au:N/C:P/I:P/A:P/E:POCsecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-121USLLM-abgeleitetCWE-264USLLM-abgeleitet

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-1591Python 2.4.2 - 'realpath()' Local Stack Overflowfunktional · exploit_db

betroffene Produkte (4)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
python python≤ 2.4.2nvdUScpe:2.3:a:python:python:*:*:*:*:*:*:*:*
rhn-solaris-bootstrap-0:5.1.1-3.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)alle Versionenfixedredhat_csafUS
rhn_solaris_bootstrap_5_1_1_3-0:1-0.noarch as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)alle Versionenfixedredhat_csafUS

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2008:0264Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update2008-05-20csaf · redhat_csafUS
Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
RHSA-2008:0525Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update2008-06-30csaf · redhat_csafUS
Red Hat Network Satellite Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
RHSA-2008:0629Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update2008-08-13csaf · redhat_csafUS
Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd nvd redhat_csaf certfr NVD CVE.org MITRE

veröffentlicht 2006-03-30geändert 2026-06-16

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

http://secunia.com/advisories/31492 enisa_euvd
http://www.gotfault.net/research/exploit/gexp-python.py enisa_euvd
http://www.redhat.com/support/errata/RHSA-2008-0629.html enisa_euvd
https://www.exploit-db.com/exploits/1591 enisa_euvd
http://secunia.com/advisories/31492Broken Linknvd
http://www.gotfault.net/research/exploit/gexp-python.pyExploitnvd
http://www.redhat.com/support/errata/RHSA-2008-0629.htmlThird Party Advisorynvd
https://www.exploit-db.com/exploits/1591Third Party AdvisoryVDB Entrynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan