Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9q3-fr3w-j4gq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

EPSS

Процентиль: 19%
0.00062
Низкий

Связанные уязвимости

ubuntu
больше 13 лет назад

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

nvd
больше 13 лет назад

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

debian
больше 13 лет назад

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the ro ...

EPSS

Процентиль: 19%
0.00062
Низкий