Arbitrary Code Execution

🗓️ 15 Jan 2019 09:05:06Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

setroubleshoot vulnerability arbitrary code execution RPM

Reporter	Title	Published	Views	Family All 35
BDU FSTEC	The vulnerability of the SELinux access control system, allowing a perpetrator to execute arbitrary commands	15 Jun 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 / 6 / 7 : setroubleshoot (CESA-2015:0729)	27 Mar 201500:00	–	nessus
Tenable Nessus	Fedora 22 : setroubleshoot-3.2.22-1.fc22 (2015-4792)	3 Apr 201500:00	–	nessus
Tenable Nessus	Fedora 20 : setroubleshoot-3.2.17-2.fc20 (2015-4833)	9 Apr 201500:00	–	nessus
Tenable Nessus	Fedora 21 : setroubleshoot-3.2.22-1.fc21 (2015-4838)	9 Apr 201500:00	–	nessus
Tenable Nessus	MiracleLinux 4 : setroubleshoot-3.0.47-6.1.0.1.AXS4 (AXSA:2015-107:01)	16 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 6 / 7 : setroubleshoot (ELSA-2015-0729)	27 Mar 201500:00	–	nessus
Tenable Nessus	RHEL 5 / 6 / 7 : setroubleshoot (RHSA-2015:0729)	27 Mar 201500:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : setroubleshoot on SL5.x, SL6.x, SL7.x i386/x86_64 (20150326)	27 Mar 201500:00	–	nessus
Cent OS	setroubleshoot security update	26 Mar 201523:21	–	centos

Vulners

Node

setroubleshoot_project setroubleshootMatch3.0.38_2.1.el6

OR

setroubleshoot_project setroubleshootMatch2.0.5_3.el5

OR

setroubleshoot_project setroubleshootMatch3.0.47_3.el6_3

OR

setroubleshoot_project setroubleshootMatch3.0.47_2.el6

OR

setroubleshoot_project setroubleshootMatch2.0.5_5.el5

OR

setroubleshoot_project setroubleshootMatch1.8.11_4.el5

OR

setroubleshoot_project setroubleshootMatch2.2.94_1.el6

OR

setroubleshoot_project setroubleshootMatch2.0.5_5.el5_8.1

Source	Link
osvdb	www.osvdb.org/119966
exploit-db	www.exploit-db.com/exploits/36564/
securityfocus	www.securityfocus.com/bid/73374
rhn	www.rhn.redhat.com/errata/RHSA-2015-0729.html
access	www.access.redhat.com/security/updates/classification/
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-March/154147.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-April/154427.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-April/154444.html
access	www.access.redhat.com/errata/RHSA-2015:0729
access	www.access.redhat.com/security/cve/CVE-2015-1815

13 Feb 2023 01:54Current

7High risk

Vulners AI Score7

CVSS 210

EPSS0.36469

setroubleshoot vulnerability rpms arbitrary code execution