CVE-2006-5214: Netbsd

Low severity, CVSS 1.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.

Affected products

• Netbsd Netbsd: version 3.0 only; version 3.99.15 only
• Sun Solaris: version 9.0 only; version 10.0 only
• Sun Sunos: version 5.8 only

Published 2006-10-10. Last modified 2026-06-16.