GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-08-14T00:00:00
Updated: 2024-08-02T18:31:53.432Z
Reserved: 2023-08-14T00:00:00
Link: CVE-2023-40303
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-08-14T05:15:10.233
Modified: 2024-11-21T08:19:11.747
Link: CVE-2023-40303
Redhat
No data.