EUVD-2014-7169

Malware in sbrugna...

CVE-2014-7298

CVE-2014-7298 affects Centrify Server Suite (2008–2014.1) and Centrify DirectControl (3.x–4.2.0) on Linux/Unix. The root cause is improperly protected setuid functionality in adsetgroups, allowing local users to read arbitrary files with root privileges. The documents do not provide exploitation ...

CVE-2014-7298: Undefined Security Weakness

adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality...

PT-2014-7890

Name of the Vulnerable Software and Affected Versions Centrify Server Suite versions 2008 through 2014.1 Centrify DirectControl versions 3.x through 4.2.0 Description The issue allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality ...