CVE

Id
87502  
CVE No.
CVE-2016-10010  
Status
Candidate  
Description
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.  
Phase
Assigned (20161219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
763832 87502 CVE-2016-10010 EXPLOIT-DB:40962  View
763833 87502 CVE-2016-10010 URL:https://www.exploit-db.com/exploits/40962/  View
763834 87502 CVE-2016-10010 MLIST:[oss-security] 20161219 Announce: OpenSSH 7.4 released  View
763835 87502 CVE-2016-10010 URL:http://www.openwall.com/lists/oss-security/2016/12/19/2  View
763836 87502 CVE-2016-10010 MISC:http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html  View
763837 87502 CVE-2016-10010 MISC:https://bugs.chromium.org/p/project-zero/issues/detail?id=1010  View
763838 87502 CVE-2016-10010 CONFIRM:https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce  View
763839 87502 CVE-2016-10010 CONFIRM:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637  View
763840 87502 CVE-2016-10010 CONFIRM:https://www.openssh.com/txt/release-7.4  View
763841 87502 CVE-2016-10010 BID:94972  View
763842 87502 CVE-2016-10010 URL:http://www.securityfocus.com/bid/94972  View
763843 87502 CVE-2016-10010 SECTRACK:1037490  View

Related JVN