Логотип exploitDog
bind:CVE-2019-10143
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-10143

Количество 7

Количество 7

ubuntu логотип

CVE-2019-10143

больше 6 лет назад

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

CVSS3: 7
EPSS: Низкий
redhat логотип

CVE-2019-10143

больше 6 лет назад

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

CVSS3: 6.4
EPSS: Низкий
nvd логотип

CVE-2019-10143

больше 6 лет назад

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

CVSS3: 7
EPSS: Низкий
debian логотип

CVE-2019-10143

больше 6 лет назад

It was discovered freeradius up to and including version 3.0.19 does n ...

CVSS3: 7
EPSS: Низкий
github логотип

GHSA-5x22-w79m-34gq

больше 3 лет назад

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user.

CVSS3: 7
EPSS: Низкий
oracle-oval логотип

ELSA-2019-3353

около 6 лет назад

ELSA-2019-3353: freeradius:3.0 security and bug fix update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2020-3984

около 5 лет назад

ELSA-2020-3984: freeradius security and bug fix update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

CVSS3: 7
0%
Низкий
больше 6 лет назад
redhat логотип
CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

CVSS3: 6.4
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

CVSS3: 7
0%
Низкий
больше 6 лет назад
debian логотип
CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does n ...

CVSS3: 7
0%
Низкий
больше 6 лет назад
github логотип
GHSA-5x22-w79m-34gq

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user.

CVSS3: 7
0%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2019-3353

ELSA-2019-3353: freeradius:3.0 security and bug fix update (MODERATE)

около 6 лет назад
oracle-oval логотип
ELSA-2020-3984

ELSA-2020-3984: freeradius security and bug fix update (MODERATE)

около 5 лет назад

Уязвимостей на страницу