Beveiligingsadvies

CVE-2020-36657

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-25 00:00:00
Laatst bijgewerkt 2025-04-01 20:11:33
Toegewezen door mitre
CVSS-score 7.8
Status PUBLISHED

Beschrijving

uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges by creating a hard link within the /var/spool/uptimed directory, because there is an unsafe chown -R call.