Privilege Escalation

2019-01-1509:06:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

autofs is vulnerable to privilege escalation. It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system.

CPENameOperatorVersion
autofseq5.0.5__39.el6
autofseq5.0.5__88.el6
autofseq5.0.5__109.el6_6.1
autofseq5.0.5__73.el6
autofseq5.0.5__54.el6
autofseq5.0.5__74.el6_4
autofseq5.0.5__31.el6
autofseq5.0.5__55.el6_3
autofseq5.0.5__89.el6_5.1
autofseq5.0.5__39.el6_2.1

Name	Operator	Version
autofs	eq	5.0.5__39.el6
autofs	eq	5.0.5__88.el6
autofs	eq	5.0.5__109.el6_6.1
autofs	eq	5.0.5__73.el6
autofs	eq	5.0.5__54.el6
autofs	eq	5.0.5__74.el6_4
autofs	eq	5.0.5__31.el6
autofs	eq	5.0.5__55.el6_3
autofs	eq	5.0.5__89.el6_5.1
autofs	eq	5.0.5__39.el6_2.1