CVE-2012-2653

CVE-2012-2653 affects arpwatch 2.1a15 (used by Red Hat, Debian, Fedora, and others). The root cause is failure to drop supplementary groups, which may allow a local attacker to gain root privileges by leveraging other vulnerabilities in the daemon. Impact: local privilege escalation; CVSS data in...