Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000857

Опубликовано: 20 дек. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 9
EPSS Низкий

Описание

log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:open-systems:log-user-session:*:*:*:*:*:*:*:*
Версия до 0.7 (включая)

EPSS

Процентиль: 68%
0.00578
Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.

EPSS

Процентиль: 68%
0.00578
Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-22