Lucene search

[email protected]NVD:CVE-2004-2778

HistoryJun 27, 2017 - 8:29 p.m.

CVE-2004-2778

2017-06-2720:29:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.

Affected configurations

Nvd

Node

gentooportage

VendorProductVersionCPE
gentooportage*cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gentoo	portage	*	cpe:2.3:a:gentoo:portage::::::::

References

www.openwall.com/lists/oss-security/2017/01/28/7

bugs.gentoo.org/show_bug.cgi?id=141619

bugs.gentoo.org/show_bug.cgi?id=396153

bugs.gentoo.org/show_bug.cgi?id=58611

bugs.gentoo.org/show_bug.cgi?id=607426

bugs.gentoo.org/show_bug.cgi?id=607430

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2004-2778

cve1 cvelist1