CVE-2019-20384

Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios…

published January 20, 2020

CVSS
—
EPSS
0%
Percentile
18.2
In the wild
Unconfirmed
What it is

Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.2th percentile
Published
2020-01-20T23:52Z
EPSS history
Timeline
  • 20 JAN 23:52Z
    Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios…
    cvelistv5