2 matches found
Design/Logic Flaw
The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the 1 HESIODCONFIG or 2 HESDOMAIN environment variable and leveraging certain SUID/SGUID binary...
6.9CVSS6.9AI score0.00391EPSS
SaveExploits0References5Affected Software1
CVE-2016-10151
The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the 1 HESIODCONFIG or 2 HESDOMAIN environment variable and leveraging certain SUID/SGUID binary...
6.9CVSS5.5AI score0.00391EPSS
SaveExploits0References1
20