CVE-2016-6903
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
9.9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.0%
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| lshell_project:lshell | lshell project lshell | eq | 0.9.16 |
References
www.openwall.com/lists/oss-security/2016/08/22/17
www.securityfocus.com/bid/92591
bugs.debian.org/cgi-bin/bugreport.cgi?bug=834946
bugzilla.redhat.com/show_bug.cgi?id=1369345
github.com/ghantoos/lshell/commit/e72dfcd1f258193f9aaea3591ecbdaed207661a0
github.com/ghantoos/lshell/issues/149
github.com/ghantoos/lshell/pull/153/commits/a686f71732a3d0f16df52ef46ab8a49ee0083c68
Related
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
9.9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.2 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.0%