- Synchronized data.

This commit is contained in:
CVE Team 2018-04-06 13:04:07 -04:00
parent 1b81c48f6b
commit 14dc110b07
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
2 changed files with 137 additions and 4 deletions

View File

@ -2,7 +2,30 @@
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2013-6876",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +34,58 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: this vulnerability was fixed with commit ad732f00b411b092c66a04c359da0f16ec3b387, but the version number was not changed."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "20140602 [FD] CVE-2013-6876 s3dvt Root shell",
"refsource" : "BUGTRAQ",
"url" : "http://www.securityfocus.com/archive/1/archive/1/532258/100/0/threaded"
},
{
"name" : "20140603 CVE-2013-6876 s3dvt Root shell",
"refsource" : "BUGTRAQ",
"url" : "http://www.securityfocus.com/archive/1/archive/1/532276/100/0/threaded"
},
{
"name" : "20140604 CVE-2013-6876 s3dvt Root shell",
"refsource" : "FULLDISC",
"url" : "http://seclists.org/fulldisclosure/2014/Jun/10"
},
{
"name" : "[oss-security] 20140603 CVE-2013-6876 s3dvt Root shell",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2014/06/03/11"
},
{
"name" : "http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.html",
"refsource" : "MISC",
"url" : "http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.html"
},
{
"name" : "http://packetstormsecurity.com/files/126887/s3dvt-Privilege-Escalation.html",
"refsource" : "MISC",
"url" : "http://packetstormsecurity.com/files/126887/s3dvt-Privilege-Escalation.html"
},
{
"name" : "67789",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/67789"
}
]
}

View File

@ -2,7 +2,30 @@
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2014-1226",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +34,43 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-6876."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "20140603 CVE-2014-1226 s3dvt Root shell (still)",
"refsource" : "BUGTRAQ",
"url" : "http://www.securityfocus.com/archive/1/archive/1/532278/100/0/threaded"
},
{
"name" : "20140604 CVE-2014-1226 s3dvt Root shell (still)",
"refsource" : "FULLDISC",
"url" : "http://seclists.org/fulldisclosure/2014/Jun/12"
},
{
"name" : "[oss-security] 20140603 CVE-2014-1226 s3dvt Root shell (still)",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2014/06/03/13"
},
{
"name" : "http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html",
"refsource" : "MISC",
"url" : "http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html"
}
]
}