Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2005-4532

Опубликовано: 28 дек. 2005
Источник: nvd
CVSS2: 7.2
EPSS Низкий

Описание

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:scponly:scponly:3.1:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.2:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.3:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.4:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.6:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.7:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.8:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.9:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:3.11:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:4.0:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 18%
0.00058
Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 19 лет назад

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

debian
больше 19 лет назад

scponlyc in scponly 4.1 and earlier, when the operating system support ...

github
больше 3 лет назад

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

fstec
больше 19 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 18%
0.00058
Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other