CVE-2004-0564

2004-12-2305:00:00

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe “is NOT designed to run setuid-root.” Therefore this identifier applies only to those configurations and installations under which pppoe is run setuid root despite the developer’s warnings.

Affected configurations

Nvd

Node

roaring_penguinpppoeMatch3.0

roaring_penguinpppoeMatch3.3

roaring_penguinpppoeMatch3.5

Node

debiandebian_linuxMatch3.0

debiandebian_linuxMatch3.0alpha

debiandebian_linuxMatch3.0arm

debiandebian_linuxMatch3.0hppa

debiandebian_linuxMatch3.0ia-32

debiandebian_linuxMatch3.0ia-64

debiandebian_linuxMatch3.0m68k

debiandebian_linuxMatch3.0mips

debiandebian_linuxMatch3.0mipsel

debiandebian_linuxMatch3.0ppc

debiandebian_linuxMatch3.0s-390

debiandebian_linuxMatch3.0sparc

VendorProductVersionCPE
roaring_penguinpppoe3.0cpe:2.3:a:roaring_penguin:pppoe:3.0:*:*:*:*:*:*:*
roaring_penguinpppoe3.3cpe:2.3:a:roaring_penguin:pppoe:3.3:*:*:*:*:*:*:*
roaring_penguinpppoe3.5cpe:2.3:a:roaring_penguin:pppoe:3.5:*:*:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
debiandebian_linux3.0cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*

Vendor	Product	Version	CPE
roaring_penguin	pppoe	3.0	cpe:2.3:a:roaring_penguin:pppoe:3.0:::::::*
roaring_penguin	pppoe	3.3	cpe:2.3:a:roaring_penguin:pppoe:3.3:::::::*
roaring_penguin	pppoe	3.5	cpe:2.3:a:roaring_penguin:pppoe:3.5:::::::*
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0:::::::*
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0::alpha:::::
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0::arm:::::
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0::hppa:::::
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0::ia-32:::::
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0::ia-64:::::
debian	debian_linux	3.0	cpe:2.3:o:debian:debian_linux:3.0::m68k:::::