CVE-2017-16659

2017-11-0805:00:00

mitre

www.cve.org

gentoo

mail-filter

assp package

local users

privileges

malicious script

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

25.1%

JSON

The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script.

References

bugs.gentoo.org/629442