CVEvulnerability
CVE-2004-2778
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.1 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.
Affected configurations
• gentoo portage
Related
Weakness · not in database (1)
References
- http://www.openwall.com/lists/oss-security/2017/01/28/7 Mailing List, Third Party Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=141619 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=396153 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=58611 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=607426 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=607430 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2017/01/28/7 Mailing List, Third Party Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=141619 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=396153 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=58611 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=607426 Vendor Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=607430 Vendor Advisory