CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
5.1%
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid
root contrary to its design, allows local users to overwrite arbitrary
files. NOTE: the developer has publicly disputed the claim that this is a
vulnerability because pppoe “is NOT designed to run setuid-root.”
Therefore this identifier applies only to those configurations and
installations under which pppoe is run setuid root despite the developer’s
warnings.