CVE

Id
14833  
CVE No.
CVE-2005-3629  
Status
Candidate  
Description
initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
114373 14833 CVE-2005-3629 REDHAT:RHSA-2006:0015  View
114374 14833 CVE-2005-3629 URL:http://www.redhat.com/support/errata/RHSA-2006-0015.html  View
114375 14833 CVE-2005-3629 REDHAT:RHSA-2006:0016  View
114376 14833 CVE-2005-3629 URL:http://www.redhat.com/support/errata/RHSA-2006-0016.html  View
114377 14833 CVE-2005-3629 SGI:20060401-01-U  View
114378 14833 CVE-2005-3629 URL:ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U  View
114379 14833 CVE-2005-3629 BID:17038  View
114380 14833 CVE-2005-3629 URL:http://www.securityfocus.com/bid/17038  View
114381 14833 CVE-2005-3629 OVAL:oval:org.mitre.oval:def:11198  View
114382 14833 CVE-2005-3629 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11198  View
114383 14833 CVE-2005-3629 SECTRACK:1015732  View
114384 14833 CVE-2005-3629 URL:http://securitytracker.com/id?1015732  View
114385 14833 CVE-2005-3629 SECUNIA:19162  View
114386 14833 CVE-2005-3629 URL:http://secunia.com/advisories/19162  View
114387 14833 CVE-2005-3629 SECUNIA:19532  View
114388 14833 CVE-2005-3629 URL:http://secunia.com/advisories/19532  View
114389 14833 CVE-2005-3629 XF:initscripts-service-gain-privileges(25374)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62544 JVNDB-2005-000746 udev における不適切なパーミッション付与による情報漏洩の脆弱性 udev には、/dev/input に作成するファイルに、不適切なパーミッションを付与してしまう脆弱性が存在します。 CVE-2005-3631 14833 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000746.html  View