high7.8
CVE-2016-5759
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
Impact
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Suse Linux Enterprise Desktop | Version 12.0 |
| Novell | Suse Linux Enterprise Server | Version 12.0 |
| Opensuse | Leap | Version 42.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html
- http://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00083.html
- http://lists.suse.com/pipermail/sle-security-updates/2016-October/002337.html