PT-2014-3214
CVE-2013-6889
·
تاريخ النشر
2014-05-08
·
تاريخ التحديث
2014-05-09
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GNU Rush version 1.7
Description
The issue allows local users to read arbitrary files due to improper privilege handling. This is achieved via the --lint option.
Recommendations
For GNU Rush version 1.7, consider restricting access to the --lint option until a proper fix is applied to ensure that privileges are dropped correctly.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾