PT-2014-3214
CVE-2013-6889
·
Published
2014-05-08
·
Updated
2014-05-09
Description by
CVSS 2.0
4.9
MediumMetricsAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GNU Rush version 1.7
Description
The issue allows local users to read arbitrary files due to improper privilege handling. This is achieved via the --lint option.
Recommendations
For GNU Rush version 1.7, consider restricting access to the --lint option until a proper fix is applied to ensure that privileges are dropped correctly.
Found an issue in the description? Have something to add? Feel free to write us 👾