CVE-2017-16933 | BDVDB-2026-93393 Detail

Description#

etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Icinga/icinga2/issues/5793

Exploit#

No public exploit known

History#

Version 12017-11-24Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.