Debian Security Bug TrackerDEBIANCVE:CVE-2004-0564CVE-2004-0564
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
5.1%
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe “is NOT designed to run setuid-root.” Therefore this identifier applies only to those configurations and installations under which pppoe is run setuid root despite the developer’s warnings.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | rp-pppoe | < 3.5-4 | rp-pppoe_3.5-4_all.deb |
| Debian | 11 | all | rp-pppoe | < 3.5-4 | rp-pppoe_3.5-4_all.deb |
| Debian | 999 | all | rp-pppoe | < 3.5-4 | rp-pppoe_3.5-4_all.deb |
| Debian | 13 | all | rp-pppoe | < 3.5-4 | rp-pppoe_3.5-4_all.deb |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
5.1%