CVE-2004-2778

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.

CVSS v3.0 7.1 HIGH
CVSS v2.0 3.6 LOW

7.1^/10

CVSS v3.0 : HIGH

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://bugs.gentoo.org/show_bug.cgi?id=607430	Vendor Advisory
https://bugs.gentoo.org/show_bug.cgi?id=607426	Vendor Advisory
https://bugs.gentoo.org/show_bug.cgi?id=58611	Vendor Advisory
https://bugs.gentoo.org/show_bug.cgi?id=396153	Vendor Advisory
https://bugs.gentoo.org/show_bug.cgi?id=141619	Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/28/7	Mailing List Third Party Advisory

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*

Information

Published : 2017-06-27 13:29

Updated : 2017-07-05 11:40

NVD link : CVE-2004-2778

Mitre link : CVE-2004-2778

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

gentoo

portage

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://bugs.gentoo.org/show_bug.cgi?id=607430", "name": "https://bugs.gentoo.org/show_bug.cgi?id=607430", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugs.gentoo.org/show_bug.cgi?id=607426", "name": "https://bugs.gentoo.org/show_bug.cgi?id=607426", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugs.gentoo.org/show_bug.cgi?id=58611", "name": "https://bugs.gentoo.org/show_bug.cgi?id=58611", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugs.gentoo.org/show_bug.cgi?id=396153", "name": "https://bugs.gentoo.org/show_bug.cgi?id=396153", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://bugs.gentoo.org/show_bug.cgi?id=141619", "name": "https://bugs.gentoo.org/show_bug.cgi?id=141619", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2017/01/28/7", "name": "[oss-security] 20170128 Re: Gentoo: order of installed packages may result in vary directories permissions, leading to crontab not requiring cron group membership as example.", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-2778", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}}, "publishedDate": "2017-06-27T20:29Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-05T18:40Z"}