PT-2010-1220
CVE-2004-2768
·
تاريخ النشر
2010-06-08
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
dpkg version 1.9.21
Description
The issue is related to the replacement of files during package upgrades, where the metadata of a file is not properly reset. This could potentially allow local users to gain privileges by creating a hard link to a setuid file, setgid file, or device.
Recommendations
For dpkg version 1.9.21, update to a newer version that contains a fix for this issue to prevent potential privilege escalation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾