CVE Vulnerabilities

CVE-2005-4532

Published: Dec 28, 2005 | Modified: Jul 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

Affected Software

Name Vendor Start Version End Version
Scponly Scponly 3.1 3.1
Scponly Scponly 3.2 3.2
Scponly Scponly 3.3 3.3
Scponly Scponly 3.4 3.4
Scponly Scponly 3.6 3.6
Scponly Scponly 3.7 3.7
Scponly Scponly 3.8 3.8
Scponly Scponly 3.9 3.9
Scponly Scponly 3.11 3.11
Scponly Scponly 4.0 4.0
Scponly Scponly 4.1 4.1
Scponly Ubuntu dapper *
Scponly Ubuntu devel *
Scponly Ubuntu edgy *
Scponly Ubuntu feisty *

References