Advisories:rPSA-2006-0105

From rPath Wiki

rPath Security Advisory 2006-0105-1

Published: 2006-06-15

Products

• rPath Linux 1

Rating

Minor

Exposure Level Classification

Local Root Non-deterministic Privilege Escalation

Updated Versions

• arts=conary.rpath.com@rpl:1/1.4.2-1.4-1

rPath Issue Tracking System

• RPL-426

References

• CVE-2006-2916
• http://www.kde.org/info/security/advisory-20060615-2.txt

Description

In previous versions of arts, the artswrapper program has a

vulnerability which enables a local users to escalate to root

privileges if the artswrapper program is setuid root. In rPath Linux,

artswrapper is not setuid root, but if users or derivative

distributions have modified artswrapper to make it setuid root, they

may be vulnerable to this attack.

Copyright 2006 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html