CVE-2007-0536 | BDVDB-2026-21860 Detail

Description#

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/23922
https://issues.rpath.com/browse/RPL-987
http://lists.rpath.com/pipermail/security-announce/2007-January/000137.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/31942
http://osvdb.org/32972

Exploit#

No public exploit known

History#

Version 12007-01-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.