Sploitus

CVE-2006-4842

28 known exploits for CVE-2006-4842

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

Affected products
Netscape Portable Runtime (Nspr) Api
Netscape Portable Runtime Api
= 4.6.1, 4.6.2
Fix
Available
CVSS 2.0
3.6 LOW
EPSS
7.6% (94th percentile)
Weakness
CWE-20
NVD status
Modified
Published
2006-10-12
CVE-2006-4842 at NVD
Authoritative description, scoring and affected products

28 known exploits for CVE-2006-4842

Proof-of-concept code and exploit modules indexed by Sploitus

exploits
2026-08-26 KitPloitKITPLOIT
Solaris libnspr NSPR_LOG_FILE Privilege Escalation Exploit
2018-09-18 metasploitZDTRuby
Solaris - libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)
2018-09-18 MetasploitEXPLOITDBRuby
Solaris libnspr NSPR_LOG_FILE Privilege Escalation
2018-09-18 Marco IvaldiPACKETSTORMRuby
Solaris libnspr NSPR_LOG_FILE Privilege Escalation
2018-09-11 iDefense, Marco Ivaldi, bcoles <bcoles@gmail.com>METASPLOITRuby
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation Vulnerability (1)
2014-07-01 RootSEEBUG
Solaris 10 libnspr - constructor Local Root Exploit
2014-07-01 RootSEEBUG
Solaris 10 libnspr - LD_PRELOAD Arbitrary File Creation Local Root Exploit
2014-07-01 RootSEEBUG
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation Vulnerability (2)
2014-07-01 RootSEEBUG
Solaris 10 (libnspr) - Arbitrary File Creation Local Root Exploit
2014-07-01 RootSEEBUG
Sun Solaris Netscape Portable Runtime API Local Privilege Escalation Vulnerabili
2008-08-22 RootSEEBUG
Solaris 10 libnspr LD_PRELOAD Arbitrary File Creation Local Root Exploit
2006-10-27 RootSEEBUG
Solaris 10 libnspr constructor Local Root Exploit
2006-10-25 RootSEEBUG
Solaris 10 libnspr constructor Local Root Exploit
2006-10-24 Marco IvaldiZDT
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2)
2006-10-24 Marco IvaldiEXPLOITPACK
Solaris 10 libnspr - Constructor Arbitrary File Creation Privilege Escalation (3)
2006-10-24 Marco IvaldiEXPLOITPACKBash
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (2)
2006-10-24 Marco IvaldiEXPLOITDB
Solaris 10 libnspr - 'Constructor' Arbitrary File Creation Privilege Escalation (3)
2006-10-24 Marco IvaldiEXPLOITDBBash
Solaris 10 libnspr LD_PRELOAD Arbitrary File Creation Local Root Exploit
2006-10-16 Marco IvaldiZDT
Solaris 10 libnspr - LD_PRELOAD Arbitrary File Creation Privilege Escalation (2)
2006-10-16 Marco IvaldiEXPLOITPACKBash
Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (2)
2006-10-16 Marco IvaldiEXPLOITDBBash
Solaris 10 (libnspr) Arbitrary File Creation Local Root Exploit
2006-10-13 Marco IvaldiZDT
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (1)
2006-10-13 Marco IvaldiEXPLOITPACK
Solaris 10 libnspr - LD_PRELOAD Arbitrary File Creation Privilege Escalation (1)
2006-10-13 Marco IvaldiEXPLOITPACKBash
Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (1)
2006-10-13 Marco IvaldiEXPLOITDBBash
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (1)
2006-10-13 Marco IvaldiEXPLOITDB
Solaris 10 (libnspr) Arbitrary File Creation Local Root Exploit
2006-10-13 RootSEEBUG
Immunity Canvas: CVE_2006_4842
2006-10-12 Immunity CanvasCANVAS