NVD

Id
31451  
Name
CVE-2014-3215  
Description
seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-05-08  
Modified Date
2016-10-11  
Seq
2014-3215  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164999 31451 CVE-2014-3215 http://advisories.mageia.org/MGASA-2014-0251.html  View
165000 31451 CVE-2014-3215 [oss-security] 20140429 local privilege escalation due to capng_lock as used in seunshare  View
165001 31451 CVE-2014-3215 [oss-security] 20140430 Re: local privilege escalation due to capng_lock as used in seunshare  View
165002 31451 CVE-2014-3215 [oss-security] 20140507 Re: local privilege escalation due to capng_lock as used in seunshare  View
165003 31451 CVE-2014-3215 MDVSA-2015:156  View
165004 31451 CVE-2014-3215 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
165005 31451 CVE-2014-3215 67341  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13540 JVNDB-2014-002415 policycoreutils の seunshare における権限を取得される脆弱性 policycoreutils の seunshare は、4755 パーミッションを持つ root に 所有され、setuid システムコールと set-user-ID 値で保存された getresuid の関係を変更するプログラムを実行するため、権限を取得される脆弱性が存在します。 CVE-2014-3215 70502 CVE-2014-3215 31451 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002415.html 2014-05-08 2015-06-09 View