{"schemaVersion":3,"id":"CVE-2006-2916","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.","dates":{"published":"2006-06-15T10:00:00.000Z","modified":"2024-08-07T18:06:27.206Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6,"severity":"medium","vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00385,"percentile":0.31033,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00385},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00385,"percentile":0.31033}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00385,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00385,"percentile":0.31033}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-273","name":"Improper Check for Dropped Privileges","description":"The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/273.html"}],"affected":[{"vendor":"kde","product":"arts","name":"arts","label":"arts","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.2","eol":null,"hubHref":"/vendor/kde/arts"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2006/2357","label":"www.vupen.com/english/advisories/2006/2357","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://secunia.com/advisories/20899","label":"secunia.com/advisories/20899","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/26506","label":"www.osvdb.org/26506","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:107","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:107","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016298","label":"securitytracker.com/id?1016298","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml","label":"www.gentoo.org/security/en/glsa/glsa-200606-22.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://secunia.com/advisories/20868","label":"secunia.com/advisories/20868","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/437362/100/0/threaded","label":"www.securityfocus.com/archive/1/437362/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/20786","label":"secunia.com/advisories/20786","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200704-22.xml","label":"security.gentoo.org/glsa/glsa-200704-22.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0409","label":"www.vupen.com/english/advisories/2007/0409","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://secunia.com/advisories/20677","label":"secunia.com/advisories/20677","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/23697","label":"www.securityfocus.com/bid/23697","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/25059","label":"secunia.com/advisories/25059","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27221","label":"exchange.xforce.ibmcloud.com/vulnerabilities/27221","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://secunia.com/advisories/20827","label":"secunia.com/advisories/20827","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_38_security.html","label":"www.novell.com/linux/security/advisories/2006_38_security.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://secunia.com/advisories/25032","label":"secunia.com/advisories/25032","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.kde.org/info/security/advisory-20060614-2.txt","label":"www.kde.org/info/security/advisory-20060614-2.txt","hostname":"www.kde.org","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://mail.gnome.org/archives/beast/2006-December/msg00025.html","label":"mail.gnome.org/archives/beast/2006-December/msg00025.html","hostname":"mail.gnome.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://dot.kde.org/1150310128/","label":"dot.kde.org/1150310128/","hostname":"dot.kde.org","tags":["X Refsource CONFIRM","Not Applicable"]},{"url":"http://www.securityfocus.com/bid/18429","label":"www.securityfocus.com/bid/18429","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Patch","Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256","label":"slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256","hostname":"slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE","Mailing List","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-06-15T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T18:06:27.206Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T20:32:11.517Z","stale":false,"partial":false}}