Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3278

Опубликовано: 07 нояб. 2019
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:redhat:frysk:*:*:*:*:*:*:*:*
Версия до 2008-08-05 (включая)
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00049
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-1188

Связанные уязвимости

redhat
больше 17 лет назад

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

CVSS3: 7.8
debian
около 6 лет назад

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Lin ...

github
больше 3 лет назад

frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.

EPSS

Процентиль: 15%
0.00049
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-1188