PT-2005-1099 · Scponly · Scponly

Max Vozeler · Published 2005-12-28 · Updated 2017-07-20 · CVE-2005-4532

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions scponly versions 4.1 and earlier

Description The issue allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD PRELOAD to modify expected function calls in the setuid application. Additionally, multiple vulnerabilities in the scponly package can lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For scponly versions 4.1 and earlier, consider upgrading to a version later than 4.1 to resolve the issue. As a temporary workaround, consider restricting the use of LD PRELOAD mechanisms and setuid applications to minimize the risk of exploitation. Avoid using setuid applications in chroot directories until the issue is resolved.

Fix

Related Identifiers

BDU:2015-09494

CVE-2005-4532

DSA-969-1

Affected Products

Scponly

References · 11

• http://secunia.com/advisories/18223 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09494 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-4532 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200512-17.xml · Vendor Advisory
• http://debian.org/security/2006/dsa-969 · Vendor Advisory
• http://sublimation.org/scponly/#relnotes · Note
• http://securityfocus.com/bid/16051 · Note
• http://security.gentoo.org/glsa/glsa-200512-17.xml · Note
• http://secunia.com/advisories/18829 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23874 · Note
• http://secunia.com/advisories/18236 · Note