VDB
GHSA-73m8-jfrm-fr4j
GHSA-73m8-jfrm-fr4j
PUBLISHED
Record from GitHub Advisory Database · Published May 2, 2022
A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux (RHEL) 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, related to requirements for directory ownership.
Timeline
- May 2, 2022 CVE Published
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-73m8-jfrm-fr4j
vulnetix vdb fixes GHSA-73m8-jfrm-fr4jOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-73m8-jfrm-fr4j/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://rhn.redhat.com/errata/RHSA-2009-1470.html url
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/038214.html url
- http://osvdb.org/58495 url
- http://secunia.com/advisories/38794 url
- http://secunia.com/advisories/38834 url
- http://secunia.com/advisories/39182 url
- http://www.vupen.com/english/advisories/2010/0528 url
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9862 url
- http://lists.vmware.com/pipermail/security-announce/2010/000082.html url
- https://nvd.nist.gov/vuln/detail/CVE-2009-2904 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=522141 url
- http://www.securityfocus.com/bid/36552 url