Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mx4x-652m-w4fw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

EPSS

Процентиль: 18%
0.00057
Низкий

Связанные уязвимости

CVSS3: 5.1
ubuntu
больше 6 лет назад

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

CVSS3: 5.1
nvd
больше 6 лет назад

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary

CVSS3: 5.1
debian
больше 6 лет назад

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterpri ...

suse-cvrf
около 6 лет назад

Security update for permissions

suse-cvrf
около 6 лет назад

Security update for permissions

EPSS

Процентиль: 18%
0.00057
Низкий