PT-2015-5696 · Canonical · Ubuntu Upstart

Halfdog · Published 2015-03-12 · Updated 2015-03-13 · CVE-2015-2285

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ubuntu Upstart versions prior to 1.13.2-0ubuntu9

Description The issue allows local users to execute arbitrary commands and gain privileges via a crafted file in /run/user/*/upstart/sessions/. This is related to the logrotation script /etc/cron.daily/upstart in the Ubuntu Upstart package.

Recommendations For versions prior to 1.13.2-0ubuntu9, update to version 1.13.2-0ubuntu9 or later to resolve the issue. As a temporary workaround, consider restricting access to the /run/user/*/upstart/sessions/ directory to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2015-2285

Affected Products

Ubuntu Upstart

References · 6

• 🔥 https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1425685 · Exploit
• 🔥 http://packetstormsecurity.com/files/130587/Ubuntu-Vivid-Upstart-Privilege-Escalation.html · Exploit
• 🔥 http://halfdog.net/Security/2015/UpstartLogrotationPrivilegeEscalation · Exploit
• 🔥 https://exploit-db.com/exploits/41765 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Mar/7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2285 · Security Note