Lucene search

K
freebsdFreeBSDFB672330-02DB-11DD-BD06-0017319806E7
HistoryMar 30, 2008 - 12:00 a.m.

suphp -- multiple local privilege escalation vulnerabilities

2008-03-3000:00:00
vuxml.freebsd.org
12

CVSS2

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Multiple local privilege escalation are found in the symlink
verification code. An attacker may use it to run a PHP script with
the victim’s privilege. This attack is a little harder when suphp
operates in paranoid mode. For suphp that runs in owner mode
which is the default in ports, immediate upgrade to latest
version is advised.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsuphp< 0.6.3UNKNOWN

CVSS2

4.3

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Related for FB672330-02DB-11DD-BD06-0017319806E7