Code injection

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x is affected by a privilege-escalation issue due to weak permissions on the /etc/init.d/cryoserver script. The default support account can modify this script and leverage /bin/cryo-mgmt to gain elevated privileges, potentially yielding root on the device. Techni...