CVE-2006-6501: canonical ubuntu_linux

CVSS: 6.8v2.0MediumModified

AliasesDEBIAN-CVE-2006-6501

Published 20-12-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-6501 is a medium (CVSS 6.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 3.00% chance of exploitation in the next 30 days, higher than 87.1% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

3.00%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1253-1 DSA-1258-1 DSA-1265-1 RHSA-2006:0758 RHSA-2006:0759 RHSA-2006:0760

Timeline

20-12-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

3.00%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

0.00 pp

From 3.00% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Mozilla3 products

firefox≥ 1.5, < 1.5.0.9 | ≥ 2.0, < 2.0.0.1
seamonkey< 1.0.7
thunderbird< 1.5.0.9

Debian2 products

firefox-esr< 45.0esr-1
debian_linuxEOL3.1 | 4.0

Canonical1 product

ubuntu_linuxEOL5.10 | 6.06 | 6.10

3 vendors · 6 products

References

53 links

www.securityfocus.com/bid/21668VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/23433Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:010Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/23439Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23672Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/5068VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/23468Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23598Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0758.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2007/dsa-1265Vendor AdvisoryX Refsource DEBIANThird Party Advisory

Show all 53 references

secunia.com/advisories/24078Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23692Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-398-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200701-04.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/23282Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24390Third Party AdvisoryX Refsource SECUNIA
www.kb.cert.org/vuls/id/263412Third Party AdvisoryX Refsource CERT VNUS Government Resource
fedoranews.org/cms/node/2297Vendor AdvisoryX Refsource FEDORABroken Link
secunia.com/advisories/23422Third Party AdvisoryX Refsource SECUNIA
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Vendor AdvisoryX Refsource HPBroken Link
secunia.com/advisories/23591Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23614Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0759.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/usn-398-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPENThird Party Advisory
securitytracker.com/id?1017404VDB EntryX Refsource SECTRACKThird Party Advisory
fedoranews.org/cms/node/2338Vendor AdvisoryX Refsource FEDORABroken Link
secunia.com/advisories/23420Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23440Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017403VDB EntryX Refsource SECTRACKThird Party Advisory
www.novell.com/linux/security/advisories/2006_80_mozilla.htmlVendor AdvisoryX Refsource SUSEBroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9746VDB EntrySignatureX Refsource OVALThird Party Advisory
www.securityfocus.com/archive/1/455145/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/23545Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23618Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200701-03.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
securitytracker.com/id?1017407VDB EntryX Refsource SECTRACKThird Party Advisory
www.us-cert.gov/cas/techalerts/TA06-354A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.mozilla.org/security/announce/2006/mfsa2006-70.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/23589Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1253Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.debian.org/security/2007/dsa-1258Vendor AdvisoryX Refsource DEBIANThird Party Advisory
issues.rpath.com/browse/RPL-883X Refsource CONFIRMBroken Link
www.securityfocus.com/archive/1/455728/100/200/threadedMailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2007_06_mozilla.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/23601Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23988Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:011Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/23514Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200701-02.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
rhn.redhat.com/errata/RHSA-2006-0760.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/usn-400-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
security-tracker.debian.org/tracker/CVE-2006-6501Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities