PT-2014-4761 · Gnu+2 · Gnu Readline+2

Published 2014-08-06 · Updated 2024-06-15 · CVE-2014-2524

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNU readline versions prior to 6.3 patch 3

Description The issue allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file. This is related to the rl tropen function in util.c.

Recommendations For versions prior to 6.3 patch 3, update to version 6.3 patch 3 or later to resolve the issue. As a temporary workaround, consider restricting access to the /var/tmp directory to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2014-2476

CVE-2014-2524

MGASA-2014-0319

OPENSUSE-SU-2014_1226-1

OPENSUSE-SU-2024:10106-1

OPENSUSE-SU-2024:10111-1

Affected Products

Alt Linux

Gnu Readline

Suse

References · 103

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cups_bash_env_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/advantech_switch_bash_env_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_mod_cgi_bash_env_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/qmail_bash_env_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/vmware_bash_function_root.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/ftp/pureftpd_bash_env_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/dhcp/bash_environment.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_bashbug_exec.rb · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2014-6271 · Exploit
• 🔥 https://github.com/hmlio/vaas-cve-2014-6271 · Exploit
• 🔥 https://github.com/b4keSn4ke/CVE-2014-6271 · Exploit
• 🔥 https://github.com/npm/ansible-bashpocalypse · Exploit
• 🔥 https://github.com/zalalov/CVE-2014-6271 · Exploit
• 🔥 https://github.com/akr3ch/CVE-2014-6271 · Exploit
• 🔥 https://github.com/0x00-0x00/CVE-2014-6271 · Exploit