CVE-2017-18284

The CVE-2017-18284 entry concerns Gentoo app-backup/burp prior to version 2.1.32, where the PID file directory is owned by the burp user. This may allow a local attacker with access to the burp account to modify the PID file and terminate arbitrary processes before a root script issues a SIGKILL....

CVE-2017-18285

CVE-2017-18285 affects Gentoo app-backup/burp prior to 2.1.32. The vulnerability stems from incorrect group ownership/permissions of the /etc/burp directory, potentially allowing a local attacker to read/write arbitrary files by modifying burp-server.conf. Documented impact is local privilege esc...