NVD

Id
17675  
Name
CVE-2016-1247  
Description
The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-02-28  
Published
2016-11-29  
Modified Date
2017-02-23  
Seq
2016-1247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97414 17675 CVE-2016-1247 http://packetstormsecurity.com/files/139750/Nginx-Debian-Based-Distros-Root-Privilege-Escalation.html  View
97415 17675 CVE-2016-1247 20161116 Nginx (Debian-based distros) - Root Privilege Escalation Vulnerability (CVE-2016-1247)  View
97416 17675 CVE-2016-1247 DSA-3701  View
97417 17675 CVE-2016-1247 20161121 Nginx (Debian-based distros) - Root Privilege Escalation (CVE-2016-1247)  View
97418 17675 CVE-2016-1247 93903  View
97419 17675 CVE-2016-1247 1037104  View
97420 17675 CVE-2016-1247 USN-3114-1  View
97421 17675 CVE-2016-1247 https://legalhackers.com/advisories/Nginx-Exploit-Deb-Root-PrivEsc-CVE-2016-1247.html  View
97422 17675 CVE-2016-1247 40768  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5264 JVNDB-2016-006037 Debian および Ubuntu 上で稼動する nginx パッケージにおける root 権限を取得される脆弱性 Debian および Ubuntu 上で稼動する nginx パッケージには、root 権限を取得される脆弱性が存在します。 CVE-2016-1247 87753 CVE-2016-1247 17675 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006037.html 2016-11-15 2016-11-30 View