CVE-2006-0071 - CERT CVE

  1. CVE-2006-0071

ID CVE-2006-0071
Sažetak The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.
Reference
CVSS
Base: 6.6
Impact: 9.2
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE NONE
CVSS vektor AV:L/AC:L/Au:N/C:C/I:C/A:N
Zadnje važnije ažuriranje 05-09-2008 - 20:58
Objavljeno 04-01-2006 - 00:03