mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-14 15:08:03 +02:00
19 lines
916 B
Markdown
19 lines
916 B
Markdown
### [CVE-2014-3215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3215)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging a program that mistakenly expected that it could permanently drop privileges.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- http://openwall.com/lists/oss-security/2014/05/08/1
|
|
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
|
|
|
|
#### Github
|
|
No PoCs found on GitHub currently.
|
|
|