CVEvulnerability
CVE-2011-4099
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.
Affected configurations
• libcap libcap (<= 2.21)
• libcap libcap 2.00
• libcap libcap 2.01
• libcap libcap 2.02
• libcap libcap 2.03
• libcap libcap 2.04
• libcap libcap 2.05
• libcap libcap 2.06
• libcap libcap 2.07
• libcap libcap 2.08
• libcap libcap 2.09
• libcap libcap 2.10
• libcap libcap 2.11
• libcap libcap 2.12
• libcap libcap 2.13
• libcap libcap 2.14
• libcap libcap 2.15
• libcap libcap 2.16
• libcap libcap 2.17
• libcap libcap 2.18
• libcap libcap 2.19
• libcap libcap 2.20
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2011-1694.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=722694 Vendor Advisory
- https://sites.google.com/site/fullycapable/release-notes-for-libcap/releasenotesfor222 sites.google.com
- http://rhn.redhat.com/errata/RHSA-2011-1694.html rhn.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=722694 Vendor Advisory
- https://sites.google.com/site/fullycapable/release-notes-for-libcap/releasenotesfor222 sites.google.com