OSVDB ID: 58495 Title: OpenSSH sshd ChrootDirectory Feature SetUID Hard Link Local Privilege Escalation |
Info |
|
|
Dates |
||||
|
|
Description |
OpenSSH contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when an error occurs in the ChrootDirectory feature during the handling of hard links to setuid programs that utilize configuration files in the chroot directory. This may allow a local attacker to gain escalated privileges. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Patch / RCS Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
It has been reported that this issue has been fixed. Upgrade to version 5.2p1-6.fc11, or higher, to address this vulnerability. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |