DEBIAN-CVE-2016-10151

The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the 1 HESIODCONFIG or 2 HESDOMAIN environment variable and leveraging certain SUID/SGUID binary...

PT-2017-7772

Name of the Vulnerable Software and Affected Versions Hesiod version 3.2.1 Description The issue allows local users to gain privileges by leveraging certain SUID/SGUID binary, using the HESIOD CONFIG or HES DOMAIN environment variables. This is due to the hesiod init function comparing EUID with...