NVD

Id
29153  
Name
CVE-2014-0249  
Description
The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrictions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-06-11  
Modified Date
2014-06-18  
Seq
2014-0249  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154755 29153 CVE-2014-0249 https://bugzilla.redhat.com/show_bug.cgi?id=1101751  View
154756 29153 CVE-2014-0249 [SSSD] 20140513 On POSIX and non-POSIX groups  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14040 JVNDB-2014-002915 System Security Services Daemon におけるアクセス制限を回避される脆弱性 System Security Services Daemon (SSSD) は、グループのメンバーシップチェーン内に非 POSIX (non-POSIX) グループが存在する場合、グループのメンバーシップを適切に識別しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2014-0249 67650 CVE-2014-0249 29153 3.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002915.html 2014-05-13 2014-06-16 View