3 matches found
Privilege Escalation
foolscap is vulnerable to privilege escalation. Malicious users that have the ability to write files to a location where the flappserver process could read them, get control of flappserver process via the lookup function...
FreeBSD : py-foolscap -- local file inclusion (09fff0d9-4126-11e5-9f01-14dae9d210b8)
Brian Warner reports : The 'flappserver' feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who has the ability to write files to a location where the flappserver process could read them, would allow that attacker to obtain control of the...
py-foolscap -- local file inclusion
Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who has the ability to write files to a location where the flappserver process could read them, would allow that attacker to obtain control of the...