CVE-2006-2196 Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at....
MediumCVSS 4.6
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jochen friedrich pinball | = 0.3.1 | No fix listed |
| debian/pinball(Debian:12) | < 0.3.1-6 | 0.3.1-6 |
| debian/pinball(Debian:13) | < 0.3.1-6 | 0.3.1-6 |
| debian/pinball(Debian:14) | < 0.3.1-6 | 0.3.1-6 |
References
- 20778 third-party-advisory
- 20834 third-party-advisory
- DSA-1102 patch vendor-advisory
- 26829 vdb-entry
- ADV-2006-2535 vdb-entry
- emilia-pinball-plugins-privilege-escalation(27420) vdb-entry
- Debian Security Tracker CVE-2006-2196 vendor-advisory