VDB
GCVE-110-CERTCC-2009-433821
GCVE-110-CERTCC-2009-433821
Advisory Published
The Defense Information Systems Agency (DISA) UNIX Security Readiness Review (SRR) scripts find(1) and execute (-exec) various programs to obtain version information. The SRR scripts are designed to be run as root. An attacker who can write a file under the root file system may be able to exploit this vulnerability to execute arbitrary code with root privileges.
Risk Scores
certcc-cam
certcc-cam
impact20population3exploitation0widely_known15score_current4.62825ease_of_exploitation17
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.