CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
69.5%
The install script in Domain Technologie Control (DTC) before 0.34.1 gives sudo permissions for chrootuid to the dtc user, which makes it easier for context-dependent users to gain privileges.
Vendor | Product | Version | CPE |
---|---|---|---|
gplhost | domain_technologie_control | * | cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.24.6 | cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.1 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.2 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.25.3 | cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.7 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.8 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.26.9 | cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.27.3 | cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:* |
gplhost | domain_technologie_control | 0.28.2 | cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:* |