CVE

Id
87023  
CVE No.
CVE-2016-0727  
Status
Candidate  
Description
The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3ubuntu5.3 on Ubuntu 16.04 LTS allows local users with access to the ntp account to write to arbitrary files and consequently gain privileges via vectors involving statistics directory cleanup.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761680 87023 CVE-2016-0727 MISC:http://packetstormsecurity.com/files/141913/NTP-Privilege-Escalation.html  View
761681 87023 CVE-2016-0727 CONFIRM:https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050  View
761682 87023 CVE-2016-0727 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1382369  View
761683 87023 CVE-2016-0727 UBUNTU:USN-3096-1  View
761684 87023 CVE-2016-0727 URL:http://www.ubuntu.com/usn/USN-3096-1  View
761685 87023 CVE-2016-0727 BID:81552  View
761686 87023 CVE-2016-0727 URL:http://www.securityfocus.com/bid/81552  View
761687 87023 CVE-2016-0727 SECTRACK:1034808  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1023 JVNDB-2016-001796 Android の Qualcomm パフォーマンスコンポーネントにおける権限を取得される脆弱性 Android の Qualcomm パフォーマンスコンポーネントには、権限を取得される脆弱性が存在します。 CVE-2016-0819 87023 9.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001796.html  View