CVE-2006-2916 - CERT CVE
ID CVE-2006-2916
Sažetak artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.
Reference
CVSS
Base: 6.0
Impact: 10.0
Exploitability:1.5
Pristup
VektorSloženostAutentikacija
LOCAL HIGH SINGLE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:L/AC:H/Au:S/C:C/I:C/A:C
Zadnje važnije ažuriranje 21-01-2024 - 01:42
Objavljeno 15-06-2006 - 10:02