Search...

rMake Crafted Recipe File Privilege Escalation

2007-01-26T05:48:55

ID OSVDB:32971
Type osvdb
Reporter OSVDB
Modified 2007-01-26T05:48:55

Description

No description provided by the source

References:

Vendor Specific News/Changelog Entry: https://issues.rpath.com/browse/RPL-1002 Secunia Advisory ID:23922 Related OSVDB ID: 32972 CVE-2007-0557

JSON Vulners Source

Initial Source

{"bulletinFamily": "software", "viewCount": 0, "reporter": "OSVDB", "references": [], "description": "# No description provided by the source\n\n## References:\nVendor Specific News/Changelog Entry: https://issues.rpath.com/browse/RPL-1002\n[Secunia Advisory ID:23922](https://secuniaresearch.flexerasoftware.com/advisories/23922/)\n[Related OSVDB ID: 32972](https://vulners.com/osvdb/OSVDB:32972)\n[CVE-2007-0557](https://vulners.com/cve/CVE-2007-0557)\n", "affectedSoftware": [], "href": "https://vulners.com/osvdb/OSVDB:32971", "modified": "2007-01-26T05:48:55", "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2017-04-28T13:20:29", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-0557"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:7156"]}], "modified": "2017-04-28T13:20:29", "rev": 2}, "vulnersScore": 6.8}, "id": "OSVDB:32971", "title": "rMake Crafted Recipe File Privilege Escalation", "edition": 1, "published": "2007-01-26T05:48:55", "type": "osvdb", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "cvelist": ["CVE-2007-0557"], "lastseen": "2017-04-28T13:20:29"}

{"cve": [{"lastseen": "2020-10-03T11:45:49", "description": "rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536.", "edition": 3, "cvss3": {}, "published": "2007-01-29T22:28:00", "title": "CVE-2007-0557", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 3.9, "obtainAllPrivilege": true, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 7.2, "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-0557"], "modified": "2008-11-15T06:41:00", "cpe": ["cpe:/a:rmake:rmake:1.0.3"], "id": "CVE-2007-0557", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-0557", "cvss": {"score": 7.2, "vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:rmake:rmake:1.0.3:*:*:*:*:*:*:*"]}], "securityvulns": [{"lastseen": "2018-08-31T11:09:23", "bulletinFamily": "software", "cvelist": ["CVE-2007-0557", "CVE-2007-0536"], "description": "No description provided", "edition": 1, "modified": "2007-02-02T00:00:00", "published": "2007-02-02T00:00:00", "id": "SECURITYVULNS:VULN:7156", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:7156", "title": "rPath Linux rMake multiple security vulneraiblities", "type": "securityvulns", "cvss": {"score": 7.2, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}