CVE-2017-18285

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and…

published June 4, 2018

CVSS
—
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.3th percentile
Published
2018-06-04T06:00Z
EPSS history
Timeline
  • 04 JUN 06:00Z
    The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and…
    cvelistv5