CVE

Id
87657  
CVE No.
CVE-2016-10151  
Status
Candidate  
Description
The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.  
Phase
Assigned (20170120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764586 87657 CVE-2016-10151 MLIST:[oss-security] 20170120 Re: CVE Request: two flaws in hesiod permitting privilege elevation  View
764587 87657 CVE-2016-10151 URL:http://www.openwall.com/lists/oss-security/2017/01/21/1  View
764588 87657 CVE-2016-10151 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1332508  View
764589 87657 CVE-2016-10151 CONFIRM:https://github.com/achernya/hesiod/pull/9  View
764590 87657 CVE-2016-10151 BID:90952  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23 JVNDB-2016-000024 サイボウズ Office におけるクロスサイトリクエストフォージェリの脆弱性 サイボウズ株式会社が提供するサイボウズ Office には、複数の機能にクロスサイトリクエストフォージェリ (CWE-352) の脆弱性が存在します。 CVE-2016-1151 87657 2.6 0.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000024.html  View