NVD

Id
69267  
Name
CVE-2005-3629  
Description
initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to gain root privileges via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-12-31  
Modified Date
2017-07-10  
Seq
2005-3629  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
358173 69267 CVE-2005-3629 20060401-01-U  View
358174 69267 CVE-2005-3629 oval:org.mitre.oval:def:11198  View
358175 69267 CVE-2005-3629 1015732  View
358176 69267 CVE-2005-3629 RHSA-2006:0015  View
358177 69267 CVE-2005-3629 RHSA-2006:0016  View
358178 69267 CVE-2005-3629 17038  View
358179 69267 CVE-2005-3629 initscripts-service-gain-privileges(25374)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57931 JVNDB-2006-000127 initscripts における root 権限を取得される脆弱性 initscripts には、/sbin/service コマンドを実行する際に複数の環境変数の処理が不適切である脆弱性が存在します。 CVE-2005-3629 14831 CVE-2005-3629 69267 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000127.html 2006-03-07 2007-04-01 View