Vulnerability Report

CVE-2006-4655

Title: Sun Solaris Auth Bypass

Auth Bypass

Proof Of Concept

PoC Available for CVE-2006-4655

CWE Category NVD-CWE-noinfo
Published Date Sep 09, 2006
Modified Date Jun 16, 2026
Exploit Status Available
Score 4.6 CVSS v2.0
Exploit Probability (EPSS)
0.87%

Vulnerability Summary

CVE-2006-4655: Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.

Impacted Vendors

C
caldera 1
S
sun 1
S
sco 1
N
novell 1
O
oracle 1

Reference Links

http://secunia.com/advisories/21815 http://secunia.com/advisories/21845 http://secunia.com/advisories/21856 http://secunia.com/advisories/21993 http://securityreason.com/securityalert/1545 http://securitytracker.com/id?1016806 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102570-1 http://support.avaya.com/elmodocs2/security/ASA-2006-195.htm http://www.risesecurity.org/advisory/RISE-2006001.txt http://www.securityfocus.com/archive/1/445579/100/0/threaded http://www.securityfocus.com/bid/19905 http://www.vupen.com/english/advisories/2006/3525 http://www.vupen.com/english/advisories/2006/3529 https://exchange.xforce.ibmcloud.com/vulnerabilities/28820 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1798 http://secunia.com/advisories/21815 http://secunia.com/advisories/21845 http://secunia.com/advisories/21856 http://secunia.com/advisories/21993 http://securityreason.com/securityalert/1545 http://securitytracker.com/id?1016806 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102570-1 http://support.avaya.com/elmodocs2/security/ASA-2006-195.htm http://www.risesecurity.org/advisory/RISE-2006001.txt http://www.securityfocus.com/archive/1/445579/100/0/threaded http://www.securityfocus.com/bid/19905 http://www.vupen.com/english/advisories/2006/3525 http://www.vupen.com/english/advisories/2006/3529 https://exchange.xforce.ibmcloud.com/vulnerabilities/28820 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1798
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
4.6
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:L/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2006-4655 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/2332
View Code
Exploit-DB https://www.exploit-db.com/exploits/2331
View Code
Exploit-DB https://www.exploit-db.com/exploits/2330
View Code
Exploit-DB https://www.exploit-db.com/exploits/2360
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.