CVE-2014-9091

Опубликовано: 10 дек. 2014

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Icecast before 2.4.0 does not change the supplementary group privileges when is configured, which allows local users to gain privileges via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:icecast:icecast:*:*:*:*:*:*:*:*

Версия до 2.3.3 (включая)

EPSS

Процентиль: 42%

0.00488

Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-9091

ubuntu

почти 12 лет назад

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.

CVE-2014-9091

debian

почти 12 лет назад

Icecast before 2.4.0 does not change the supplementary group privilege ...

GHSA-2v9p-jv6j-hxqx

github

больше 4 лет назад

Icecast before 2.4.0 does not change the supplementary group privileges when <changeowner> is configured, which allows local users to gain privileges via unspecified vectors.

ALT-PU-2018-1067

altlinux

почти 9 лет назад

ALT-PU-2018-1067: package `icecast` update to version 2.4.3-alt1

EPSS

Процентиль: 42%

0.00488

Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264