exploitDog

GHSA-rrh3-gpv6-cmj6

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-1151
http://bugs.gentoo.org/show_bug.cgi?id=90622
http://secunia.com/advisories/15475
http://secunia.com/advisories/15478
http://secunia.com/advisories/15505
http://www.debian.org/security/2005/dsa-728
http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml

EPSS

Процентиль: 28%

0.00357

Низкий

CVE ID

Связанные уязвимости

CVE-2005-1151

ubuntu

около 21 года назад

qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

CVE-2005-1151

nvd

около 21 года назад

qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

CVE-2005-1151

debian

около 21 года назад

qpopper 4.0.5 and earlier does not properly drop privileges before pro ...

EPSS

Процентиль: 28%

0.00357

Низкий

CVE ID