Описание
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | not-affected | |
| esm-apps-legacy/xenial | not-affected | |
| esm-apps/bionic | not-affected | |
| esm-apps/xenial | not-affected | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | code not present |
| bionic | not-affected | code not present |
| cosmic | DNE | |
| devel | DNE | |
| esm-apps/bionic | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [code not present]] |
| esm-infra-legacy/xenial | not-affected | code not present |
| esm-infra/xenial | not-affected | code not present |
| precise | not-affected | code not present |
| precise/esm | DNE | precise was not-affected [code not present] |
Показывать по
7.2 High
CVSS2
7.8 High
CVSS3
Связанные уязвимости
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
A privilege escalation vulnerability was found in nagios 4.2.x that oc ...
A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change.
7.2 High
CVSS2
7.8 High
CVSS3