The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
![]() | CVE-2017-18240 | 19 Mar 201802:29 | – | debiancve |
![]() | CVE-2017-18240 | 19 Mar 201800:00 | – | ubuntucve |
![]() | CVE-2017-18240 | 19 Mar 201802:00 | – | cvelist |
![]() | Arbitrary file deletion | 19 Mar 201802:29 | – | prion |
![]() | CVE-2017-18240 | 19 Mar 201802:29 | – | osv |
![]() | CVE-2017-18240 | 19 Mar 201802:29 | – | nvd |
![]() | GLSA-201803-10 : collectd: Multiple vulnerabilities | 22 Mar 201800:00 | – | nessus |
![]() | collectd: Multiple vulnerabilities | 22 Mar 201800:00 | – | gentoo |
Source | Link |
---|---|
security | www.security.gentoo.org/glsa/201803-10 |
bugs | www.bugs.gentoo.org/628540 |
securityfocus | www.securityfocus.com/bid/103469 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo