Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-5397HistoryDec 09, 2008 - 12:30 a.m.
CVE-2008-5397
2008-12-0900:30:00
Debian Security Bug Tracker
security-tracker.debian.org
7
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | tor | < 0.2.0.32-1 | tor_0.2.0.32-1_all.deb |
| Debian | 11 | all | tor | < 0.2.0.32-1 | tor_0.2.0.32-1_all.deb |
| Debian | 999 | all | tor | < 0.2.0.32-1 | tor_0.2.0.32-1_all.deb |
| Debian | 13 | all | tor | < 0.2.0.32-1 | tor_0.2.0.32-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2008-5397
2008-12-09 00:00:00
prion
prion
Default configuration
2008-12-09 00:30:00
cvelist
cvelist
CVE-2008-5397
2008-12-09 00:00:00
nvd
nvd
CVE-2008-5397
2008-12-09 00:30:00
cve
cve
CVE-2008-5397
2008-12-09 00:30:00
openvas
openvas
TOR Privilege Escalation Vulnerability (Windows)
2008-12-31 00:00:00
TOR Privilege Escalation Vulnerability (Linux)
2008-12-31 00:00:00
TOR Privilege Escalation Vulnerability - Windows
2008-12-31 00:00:00
gentoo
gentoo
Tor: Multiple vulnerabilities
2009-04-08 00:00:00
nessus
nessus
GLSA-200904-11 : Tor: Multiple vulnerabilities
2009-04-11 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2008-5397