NVD

Id
83718  
Name
CVE-2017-5207  
Description
Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-04-27  
Published
2017-03-23  
Modified Date
2017-04-05  
Seq
2017-5207  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
411557 83718 CVE-2017-5359 http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt  View
411558 83718 CVE-2017-5359 http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html  View
411559 83718 CVE-2017-5359 20170222 EasyCom SQL iPlug Denial Of Service  View
411560 83718 CVE-2017-5359 20170304 EasyCom SQL iPlug Denial Of Service  View
411561 83718 CVE-2017-5359 96420  View
411562 83718 CVE-2017-5359 41426  View
411563 83718 CVE-2017-5359 http://hyp3rlinx.altervista.org/advisories/EASYCOM-SQL-IPLUG-DENIAL-OF-SERVICE.txt  View
411564 83718 CVE-2017-5359 http://packetstormsecurity.com/files/141300/EasyCom-SQL-iPlug-Denial-Of-Service.html  View
411565 83718 CVE-2017-5359 20170222 EasyCom SQL iPlug Denial Of Service  View
411566 83718 CVE-2017-5359 20170304 EasyCom SQL iPlug Denial Of Service  View
411567 83718 CVE-2017-5359 96420  View
411568 83718 CVE-2017-5359 41426  View
413400 83718 CVE-2017-0038 https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS  View
413401 83718 CVE-2017-0038 https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66300 JVNDB-2017-002638 Firejail における root 権限を取得される脆弱性 Firejail には、bandwidth コマンドを実行する場合、root 権限を取得される脆弱性が存在します。 CVE-2017-5207 0 CVE-2017-5207 83718 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002638.html 2017-01-07 2017-04-24 View