Lucene search
HistoryJan 27, 2007 - 12:28 a.m.
CVE-2007-0536
cve-2007-0536
chroot helper
rmake
rpath linux 1
insecure permissions
local users
gain privileges
nvd
6.8 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rpath:rpath_linux | rpath rpath linux | eq | 1 |
Related
prion
prion
Design/Logic Flaw
2007-01-27 00:28:00
Design/Logic Flaw
2007-01-29 22:28:00
cve
cve
CVE-2007-0557
2007-01-29 22:28:00
securityvulns
securityvulns
rPath Linux rMake multiple security vulneraiblities
2007-02-02 00:00:00
6.8 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2007-0536