Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-24331

Опубликовано: 13 авг. 2020
Источник: redhat
CVSS3: 7.8

Описание

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5trousersOut of support scope
Red Hat Enterprise Linux 6trousersOut of support scope
Red Hat Enterprise Linux 7trousersWill not fix
Red Hat Enterprise Linux 8trousersFixedRHSA-2021:162718.05.2021

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1870056trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

CVSS3: 7.8
nvd
почти 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

CVSS3: 7.8
msrc
почти 5 лет назад

Описание отсутствует

CVSS3: 7.8
debian
почти 5 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon ...

CVSS3: 7.8
github
около 3 лет назад

An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).

7.8 High

CVSS3