Lucene search

K
gentooGentoo FoundationGLSA-201110-18
HistoryOct 22, 2011 - 12:00 a.m.

rgmanager: Privilege escalation

2011-10-2200:00:00
Gentoo Foundation
security.gentoo.org
9

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Background

rgmanager is a clustered resource group manager.

Description

A vulnerability has been discovered in rgmanager. Please review the CVE identifier referenced below for details.

Impact

A local attacker could gain escalated privileges.

Workaround

There is no known workaround at this time.

Resolution

All rgmanager users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=sys-cluster/rgmanager-2.03.09-r1"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-cluster/rgmanager< 2.03.09-r1UNKNOWN

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%