Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9q3-fr3w-j4gq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

EPSS

Процентиль: 24%
0.00313
Низкий

Связанные уязвимости

ubuntu
почти 14 лет назад

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

nvd
почти 14 лет назад

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which might allow local users to bypass intended file-read restrictions by leveraging a race condition in a file-permission check.

debian
почти 14 лет назад

Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the ro ...

EPSS

Процентиль: 24%
0.00313
Низкий