Lucene search
+L

10 matches found

osv_cve
osv_cve
•added 2017/04/11 6:59 p.m.•26 views

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

7CVSS7.3AI score
SaveExploits0References7
NVD
NVD
•added 2017/04/11 6:59 p.m.•27 views

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

7CVSS7AI score0.00474EPSS
SaveExploits1References7
NVD
NVD
•added 2017/04/11 6:59 p.m.•27 views

CVE-2016-4445

The fixlookupid function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function...

7CVSS7AI score0.00474EPSS
SaveExploits1References6
Prion
Prion
•added 2017/04/11 6:59 p.m.•26 views

Design/Logic Flaw

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

6.9CVSS7.5AI score0.00474EPSS
SaveExploits1References7Affected Software5
Prion
Prion
•added 2017/04/11 6:59 p.m.•38 views

Design/Logic Flaw

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

6.9CVSS6.9AI score0.00474EPSS
SaveExploits1References7Affected Software4
NVD
NVD
•added 2017/04/11 6:59 p.m.•42 views

CVE-2016-4989

setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by 1 triggering an SELinux denial with a crafted file name, which is handled by the settpath function in auditdata.py or via a crafted 2 localid or 3 analysisid field in a crafted...

7CVSS7AI score0.00458EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2017/04/11 6:00 p.m.•36 views

CVE-2016-4444

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

7AI score0.00474EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/11 12:00 a.m.•10 views

CVE-2016-4444: Improper Neutralization of Special Elements used in a Command

The allowexecmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function...

7CVSS6.4AI score0.00474EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2016/06/21 12:00 a.m.•3 views

PT-2017-8489

Name of the Vulnerable Software and Affected Versions setroubleshoot versions prior to 3.2.23 Description The issue allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename. This is related to the commands.getstatusoutput function...

7CVSS0.00474EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2016/06/21 12:00 a.m.•5 views

PT-2017-8490

Name of the Vulnerable Software and Affected Versions setroubleshoot versions prior to 3.2.23 Description The issue allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name. This is related to executing external commands with the...

7CVSS0.00474EPSS
SaveExploits1References9
Rows per page
Query Builder