CVE-2006-4842: Netscape Portable Runtime API

Low severity, CVSS 3.6. EPSS: 7.6% chance of exploitation in the next 30 days.

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.

Affected products

• Netscape Portable Runtime API: version 4.6.1 only; version 4.6.2 only
• Sun Solaris: version 10.0 only

Published 2006-10-12. Last modified 2026-06-16.