CVE-2015-3246
HIGH
7,2
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,1961
Percentile
1,0th
Updated
EPSS Score Trend (Last 75 Days)
Exploit
Libuser Library - Multiple Vulnerabilities
VerifiedLibuser Library - Multiple Vulnerabilities
View Exploit Code →
Exploit
Libuser - 'roothelper' Local Privilege Escalation (Metasploit)
Verified LocalLibuser - 'roothelper' Local Privilege Escalation (Metasploit)
View Exploit Code →
Application
Libuser by Redhat
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:0.60-4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Libuser by Redhat
Version Range Affected
To
0.56.13-5
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Libuser by Redhat
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:0.60-3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Libuser by Redhat
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:0.60-6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Libuser by Redhat
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:0.60-5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Libuser by Redhat
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:0.60-2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Libuser by Redhat
CPE Identifier
View Detailed Analysis
cpe:2.3:a:redhat:libuser:0.60-1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.ht…
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html
http://rhn.redhat.com/errata/RHSA-2015-1482.html
http://rhn.redhat.com/errata/RHSA-2015-1483.html
https://access.redhat.com/articles/1537873
https://www.exploit-db.com/exploits/44633/
https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve…
http://www.securityfocus.com/bid/76022
http://www.securitytracker.com/id/1033040
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.ht…
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html
http://rhn.redhat.com/errata/RHSA-2015-1482.html
http://rhn.redhat.com/errata/RHSA-2015-1483.html
https://access.redhat.com/articles/1537873
https://www.exploit-db.com/exploits/44633/
https://www.qualys.com/2015/07/23/cve-2015-3245-cve-2015-3246/cve-2015-3245-cve…
http://www.securityfocus.com/bid/76022
http://www.securitytracker.com/id/1033040