Описание
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 2.9.2-6ubuntu1 |
| devel | released | 2.9.2-6ubuntu1 |
| edgy | released | 2.9.2-6ubuntu1 |
| feisty | released | 2.9.2-6ubuntu1 |
| upstream | needs-triage |
Показывать по
10
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 1.0.0-1ubuntu1 |
| devel | released | 1.0.0-1ubuntu1 |
| edgy | released | 1.0.0-1ubuntu1 |
| feisty | released | 1.0.0-1ubuntu1 |
| upstream | needs-triage |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 21%
0.00068
Низкий
4.6 Medium
CVSS2
Связанные уязвимости
nvd
больше 20 лет назад
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
debian
больше 20 лет назад
uim before 0.4.5.1 trusts certain environment variables when libUIM is ...
github
больше 3 лет назад
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which allows local users to gain privileges.
EPSS
Процентиль: 21%
0.00068
Низкий
4.6 Medium
CVSS2