3 matches found
CVE-2011-2910
The AX.25 daemon ax25d in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation...
CVE-2011-2910: Improper Privilege Management
The AX.25 daemon ax25d in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation...
PT-2019-6654
Name of the Vulnerable Software and Affected Versions ax25-tools versions prior to 0.0.8-13 Description The issue is related to the AX.25 daemon ax25d not checking the return value of a setuid call, which is responsible for dropping privileges. If the setuid call fails, the daemon continues to ru...