CVE-2018-1000857

log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in…

published December 20, 2018

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03253 · 88.3th percentile
Published
2018-12-20T16:00Z
EPSS history
Timeline
  • 20 DEC 16:00Z
    log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in…
    cvelistv5