CVE-2014-7298 | BDVDB-2026-65821 Detail

Description#

adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exploithub.com/centrify-data-leakage.html
http://twitter.com/travemme/statuses/525298393971564544
http://www.centrify.com/support/announcements.asp#20141014

Exploit#

No public exploit known

History#

Version 12014-10-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.