PT-2019-6496
CVE-2008-3278
·
تاريخ النشر
2019-11-07
·
تاريخ التحديث
2019-11-13
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5
Description
The issue arises from an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f*, such as fcore, fcatch, fstack, and fstep, shipped in the frysk package. A local attacker can exploit this by running arbitrary code as another user.
Recommendations
For frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5, consider rebuilding the packages with a secure RPATH set in the ELF header to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾