medium4.9
CVE-2013-6889
GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
Impact
GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Rush | Version 1.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.gnu.org.ua/gitweb?p=rush.git%3Ba=commit%3Bh=00bdccd429517f12dbf37ab4397ddec3e51a2738
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733505
- http://git.gnu.org.ua/gitweb?p=rush.git%3Ba=commit%3Bh=00bdccd429517f12dbf37ab4397ddec3e51a2738
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733505