Escalation Of Privilege

2020-12-0604:12:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

64.8%

JSON

generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges.

CPENameOperatorVersion
ace:bustereq0.0.5-3+b11
ace:bullseyeeq0.0.5-3+b11
ace:sideq0.0.5-3+b11
ace:stretcheq0.0.4+git20160102.51.71afeb7-1+b2
ace:bustereq0.0.5-3+b11
ace:bullseyeeq0.0.5-3+b11
ace:sideq0.0.5-3+b11
ace:stretcheq0.0.4+git20160102.51.71afeb7-1+b2

Name	Operator	Version
ace:buster	eq	0.0.5-3+b11
ace:bullseye	eq	0.0.5-3+b11
ace:sid	eq	0.0.5-3+b11
ace:stretch	eq	0.0.4+git20160102.51.71afeb7-1+b2
ace:buster	eq	0.0.5-3+b11
ace:bullseye	eq	0.0.5-3+b11
ace:sid	eq	0.0.5-3+b11
ace:stretch	eq	0.0.4+git20160102.51.71afeb7-1+b2