CRITICAL🇬🇧 English

CVE-2011-2921

CVSS 9.8v3.1pub. 2019-11-19upd. 2024-11-21

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ktsuss Project Ktsuss

    APP
    Ktsuss Project
    ≤ 1.4
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2011-2922HIGH7.8ten sam produkt

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to esca...