CVE-2014-7298

CVE-2014-7298 affects Centrify Server Suite (2008–2014.1) and Centrify DirectControl (3.x–4.2.0) on Linux/Unix. The root cause is improperly protected setuid functionality in adsetgroups, allowing local users to read arbitrary files with root privileges. The documents do not provide exploitation ...

PT-2014-7890

Name of the Vulnerable Software and Affected Versions Centrify Server Suite versions 2008 through 2014.1 Centrify DirectControl versions 3.x through 4.2.0 Description The issue allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality ...