logo
DATABASE RESOURCES PRICING ABOUT US

FreeBSD : security/trousers -- several vulnerabilities (e37a0a7b-e1a7-11ea-9538-0c9d925bbbc0)

Description

the TrouSerS project reports reports : If the tcsd daemon is started with root privileges, it fails to drop the root gid after it is no longer needed. If the tcsd daemon is started with root privileges, the tss user has read and write access to the /etc/tcsd.conf file. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks.


Related