CVE-2017-18225

CVE-2017-18225 affects Gentoo net-im/jabberd2 up to version 2.6.1; the package installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber account. A local attacker could escalate privileges by exploiting access to this account while root execute...