Описание
mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libapache2-mod-ruid2 | fixed | 0.9.8-1 | package | |
| libapache2-mod-ruid2 | no-dsa | wheezy | package |
Примечания
Fix: https://github.com/mind04/mod-ruid2/commit/1fed9dda70cd44d54301df19730a29ae0989e0a2
EPSS
Процентиль: 81%
0.02165
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
почти 7 лет назад
mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.
CVSS3: 7.5
nvd
почти 7 лет назад
mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.
github
больше 4 лет назад
mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.
EPSS
Процентиль: 81%
0.02165
Низкий