Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hpg7-623w-gqxj

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.

EPSS

Процентиль: 11%
0.00038
Низкий

7.8 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.

CVSS3: 6.7
redhat
около 8 лет назад

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.

CVSS3: 7.8
nvd
около 8 лет назад

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging access to this unprivileged account.

CVSS3: 7.8
debian
около 8 лет назад

PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an u ...

EPSS

Процентиль: 11%
0.00038
Низкий

7.8 High

CVSS3

Дефекты

CWE-732