CVE-2007-1370 - CERT CVE
ID CVE-2007-1370
Sažetak Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.
Reference
CVSS
Base: 6.2
Impact: 10.0
Exploitability:1.9
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:L/AC:H/Au:N/C:C/I:C/A:C
Zadnje važnije ažuriranje 29-07-2017 - 01:30
Objavljeno 09-03-2007 - 22:19