Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by modifying a script file.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/637068 | Third Party Advisory US Government Resource |
Configurations
Information
Published : 2015-01-31 18:59
Updated : 2015-02-03 07:20
NVD link : CVE-2015-0926
Mitre link : CVE-2015-0926
JSON object : View
CWE
CWE-284
Improper Access Control
Products Affected
labtech_software
- labtech