Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-18285

Опубликовано: 04 июн. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 3.6
CVSS3: 7.1

Описание

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

cosmic

not-affected

devel

not-affected

esm-apps/bionic

not-affected

esm-apps/xenial

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
precise/esm

DNE

trusty

not-affected

trusty/esm

DNE

trusty was not-affected

Показывать по

EPSS

Процентиль: 12%
0.0004
Низкий

3.6 Low

CVSS2

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
nvd
больше 7 лет назад

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.

CVSS3: 7.1
debian
больше 7 лет назад

The Gentoo app-backup/burp package before 2.1.32 has incorrect group o ...

CVSS3: 7.1
github
больше 3 лет назад

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.

EPSS

Процентиль: 12%
0.0004
Низкий

3.6 Low

CVSS2

7.1 High

CVSS3