| ID |
CVE-2016-9638
|
| Sažetak |
In BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit. However, when executing it, it will look for a binary named "virsh" using the PATH environment variable. The "listguests64" program will then run "virsh" using root privileges. This allows local users to elevate their privileges to root. |
| Reference |
|
| CVSS |
| Base: | 7.2 |
| Impact: | 10.0 |
| Exploitability: | 3.9 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| LOCAL |
LOW |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| CVSS vektor |
AV:L/AC:L/Au:N/C:C/I:C/A:C |
| Zadnje važnije ažuriranje |
28-07-2017 - 01:29 |
| Objavljeno |
02-12-2016 - 17:59 |
