PT-2014-8819

CVE-2014-9091

·

Published

2014-12-10

·

Updated

2018-01-23

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Icecast versions prior to 2.4.0
Description The issue allows local users to gain privileges via unspecified vectors because Icecast does not change the supplementary group privileges when the changeowner option is configured.
Recommendations For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2014-9091
ALT-PU-2018-1067
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com