Security Advisory
CVE-2016-3067
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.