PT-2017-4428 · Gentoo · Gentoo

Publicado 2017-06-27 · Atualizado 2017-07-05 · CVE-2004-2778

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Gentoo (affected versions not specified)

Description: The issue in Gentoo allows local users to access restricted directories or execute commands they should not be able to, due to how the Ebuild handles directory and file permissions based on the order of package installation. This could enable users to read or write to restricted areas or execute commands that are normally restricted.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2004-2778

Produtos afetados

Gentoo

Referências · 7

• https://bugs.gentoo.org/show_bug.cgi?id=141619 · Aviso do Fabricante
• https://bugs.gentoo.org/show_bug.cgi?id=607430 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/01/28/7 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2778 · Nota de Segurança
• https://bugs.gentoo.org/show_bug.cgi?id=607426 · Aviso do Fabricante
• https://bugs.gentoo.org/show_bug.cgi?id=58611 · Aviso do Fabricante
• https://bugs.gentoo.org/show_bug.cgi?id=396153 · Aviso do Fabricante